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FOREWORD 
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SUMMARY 


Digital  technology  has  effectively  been  applied  to  the 
computational  aspects  of  flight  control  systems  but  must  interface  with 
traditional ly  analog  power  elements  (e.g.,  hydraulic  servo  actuators). 

To  evaluate  this  interface,  the  flight  control  actuation 
subsystem  was  defined  In  terms  of  three  equipment  elements  (control 
processor,  servo  processor  and  servo  actuator  complex)  and  their 
communication  interfaces. 

It  was  then  possible  to  synthesize  these  elements  as  digital  or 
analog  or  as  a  combination.  It  was  also  possible  to  evaluate  the 
assignment  of  functions  to  these  elements  and  to  evaluate  location 
options  for  the  servo  processors. 

A  set  of  design  Issues  were  then  identified  with  respect  to 
these  elements  ar.d  these  included  the  above-mentioned  functional  task 
assignments  and  physical  locations;  but  in  addition,  included  require¬ 
ments  on  a  serial  bus,  electronics  capable  of  a  high  temperature  en¬ 
vironment,  feasibility  of  digital  mechanization,  and  fault  detection/ 
redundancy  management  considerations. 

These  element  alternatives  were  evaluated  Oy  synthesizing  five 
actuation  system  configurations  and  comparing  them  in  performance  and 
physical  factors  to  a  baseline  conf i gurati or  of  known  characteristics 
An  HR  nonlinear  computer  model  was  used  to  evaluate  performance. 
Calculations  were  made  of  weight,  cost,  and  reliability.  Estimates  were 
made  where  hardware  was  not  developed. 

Results  showed  no  essential  change  in  performance  for  config¬ 
urations  in  which  digital  mechanizations  were  limited  to  electronics  and 
the  el ectrohydraul ic  servovalve.  Digital  implementation  at  high  power 
levels  (actuator)  could  not  meet  performance  objectives,  and  physical/ 
cost/reliability  objectives  were  exceeded. 
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The  most  significant  result  was  projected  by  configurations 
which  placed  the  servo  processor  In  proximity  to,  or  Integrated  with, 
the  actuator  Itself.  This  resulted  In  the  substitution  of  a  digital 
serial  bus  for  large  bundles  of  wires  between  the  control  processors  and 
the  actuators.  Electronics  to  withstand  this  environment  was  found  to 
be  "developed"  on  a  government  sponsored  program,  but  not  yet  In 
production. 

Recommendations  for  new  development  programs  Include  (1)  the 
application  of  now-available  high-temperature  digital  electronic 
circuits  to  the  design  of  a  servo  processor  to  be  Integrated  with  the 
actuator,  (2)  design,  fabrication,  and  test  of  a  flight  worthy  “smart 
actuator",  (3)  development  of  a  control -loop  optlmljed,  serial  data  bus, 
(4)  study  of  flight  control  architecture  based  on  distributed  systems 
and  "smart  actuator"  hardware. 


SECTION  I 
INTRODUCTION 


A.  BACKGROUND 

A  revolution  in  electronic  computational  and  communication 
devices  coupled  with  evolutions  in  actuation  devices  has  created  oppor¬ 
tunities  to  Improve  the  performance ,  availability,  and  maintainability 
of  flight  control  systems  at  lower  development  procurement  and  opera¬ 
tional  costs.  At  the  same  time,  designs  of  new,  manned  aircraft  with 
special  maneuvering  requirements  have  placed  ever  increasing  demands  on 
flight  controls  and  their  Interaction  with  engine  controls,  armament 
controls,  navigation  systems,  and  the  cockpit  interface. 

The  most  significant  events  in  the  electronic  revolution  are 
those  related  to  digital  technology.  The  first  stage  has  already  taken 
place  through  the  introduction  of  the  digital  computer  to  perform  com¬ 
putations  for  vehicle  control-law  transfer  functions. 

During  the  course  of  the  technology  Survey  involved  wiun  this 
study,  it  was  noted  that  the  majority  of  the  flight  control  technology- 
based  programs  were  being  funded  in  the  areas  of  digital  processing  and 
software  developments  and  in  sensor  design  and  development.  Roth  of 
these  activities  were  focused  on  near-term  payoff  for  production  flight 
control  applications. 

A  review  of  technology  programs  in  the  actuation  area  showeo 
that  effort  was  oriented  toward  the  direct  drive  valve,  8000  psi  non¬ 
flammable  fluids  and  toward  the  all-electric  airplane.  However,  only  a 
limited  amount  of  RXD  has  been  accomplished  on  digital  actuation;  there¬ 
fore,  this  work  and  the  results  that  were  obtained  are  considered  to  be 
quite  timely. 

The  near-term  gap  1dentified  was  an  optimization  of  the  inter¬ 
face  between  a  digital  computational  element  and  an  ultimate  analog 
control  surface. 
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B. 


STATEMENT  OF  THE  PROBLEM 


Digital  technology  has  been  applied  to  flight  control  systems 
quite  effectively  and  efficiently,  particularly  in  the  computational 
elements.  Further,  It  has  a  higher  reliability  than  many  of  its  analog 
counterparts. 

The  problem  in  flight  control  actuation  systems  is  that  the 
control  surfaces  are  analog,  requiring  considerable  power.  The  question 
is  "Where  should  the  digital-to-analog  conversion  take  place?" 

C.  TECHNICAL  APPROACH 

The  technical  approach  adopted  for  this  study  was  to  establish 
an  in-depth  paper  analysis  involving  a  definition  of  the  major  elements 
of  an  actuation  system.  Various  configurations  were  developed  involving 
these  elements  from  a  baseline  to  modified  forms  wherein  the  digital- 
to-analog  point  was  moved  along  the  control  path  from  command  generator 
to  power  transducer.  As  this  process  developed,  several  "issues"  arose 
requiring  analysis  in  order  to  understand  their  implications  on  overall 
design  goals  and  requirements. 

D.  STUDY  OBJECTIVES 

This  study  addresses  questions  conce-ning  the  interface  cf 
redundant  flight  control  computers  with  redundant  actuators.  In  parti¬ 
cular  it  asks:  "Where  is  the  optimum  digital-to-analog  conversion  point 
between  the  control  processor  and  outward  to  the  actuation  device  it¬ 
self?"  The  details  involve: 

t  What  elements  of  the  actuation  system  (servo  processor  and 
actuator  complex)  should  be  mechanized  in  digital 
technology? 

•  Where  can  and  should  the  servo  processor  electronics  be 
located? 


•  Considering  che  options  in  elements  and  locations,  what 
interface  data  communications  are  required  between  the 
elements  of  the  flight  control  actuation  system' 

•  What  is  the  optimum  configuration  for  today's  technology? 

•  What  is  the  optimum  configuration  for  future  technology? 

•  What  development  programs  are  recorrmended  to  be  pursued? 

E.  GROUND  RULES 

•  The  flight  control  system  selected  as  a  baseline  was  a 
triflex,  analog,  fly-by-wire  system  driving  a  hydraulically 
powered  active-on-line  actuation  system  as  a  primary  sur¬ 
face.  Specifications  are  contained  in  Appendix  A. 

•  The  baseline  system  is  commanded  by  analog  computers.  All 
other  configurations  are  commanded  by  digital  processors. 
Baseline  characteristics  are  detailed  in  Appendix  B. 

•  The  flight,  control  computer  configuration  is  a  triplex 

sel f-ci  :king  pair  based  on  "A  Mul ti-Microprocessor  Flight 
Control  System,"  Honeywell  Systems  and  Research  Center,  May 
1981,  AFWAL-TR-81-3044 . 

•  For  study  purposes  it  was  assumed  that  the  flight  control 
system  is  for  a  vehicle  with  12  fly-by-wire  controlled 
surfaces. 

•  For  the  purposes  of  this  study,  "digital"  includes  techni¬ 
ques  such  as  pulse-width  modulation  or  other  discontinuous 
signal  forms. 

•  The  control  processor's  cost,  weight,  reliability,  and 
software  are  not  incuded  in  the  study.  It  is  assumed  the 
processors  are  providing  information  at  a  specified  output 
data  rate. 

•  Configuration  performance  comparisons  are  made  by  a  servo- 
actuator  dynamic  analysis  computer  program,  described  in 
Appendix  C. 
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SECTION  II 

TECHNICAL  APPROACH  -  ELEMENTS,  ISSUES  AND  CONFIGURATIONS 


The  technical  approach  taken  was  to  break  down  the  flight 
control  actuation  system  into  equipment  elements.  This  was  done  in 
order  to  assess  what  functions  should  be  assigned  to  these  elements,  how 
they  were  to  be  dispersed  within  the  airfra  ,  and  their  equipment 
content  -  analog  or  digital. 

A.  DEFINITION  -  ACTUATION  SYSTEM  ELEMENTS 

The  actuation  system  is  displayed  in  figure  1  to  include  the 
three  equipment  elements  and  the  communication  links  between  them.  The 
elements  arid  links  are  defined  as  follows:  The  definition  of  the  func¬ 
tions  performed  are  tentative  and  later  analysis  vill  evaluate  these 
choices. 


i*i  18I  (C!  'O'  .El 

Figure  1.  Actuation  Systems  Elements 

•  Control  Processor  -  This  element  is  that  portion  of  the 
flight  control  computer  complex  devoted  to  generating  the 
control  surface  command  signals. 

•  CP-SP  Interface  -  This  is  the  communication  link  between  the 
control  processor  (A)  and  the  servo  processor  (C). 

o  Servo  Processor  -  This  element  performs  the  functions,  elec¬ 
trically  of  servcampl ification,  failure  detection,  servo 
loop  closure,  redundancy  management,  and  electrical/ 
hydraulic  power  control. 

•  Actuator  Interface  -  This  is  the  conmuni cation  link  between 
the  servo  processor  (C)  and  the  servoactuator  complex  (E). 
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•  Servoactuator  Complex  -  This  element  contains  the  various 
actuator  components  Including  the  electrohydraulic  valve, 
hydraulic  amplifiers,  power  cylinder  (ram),  position  and 
pressure  transducers,  hydromechanical  fa^ure  detection,  and 
hydraulic  power  control  devices. 

B.  CONFIGURATIONS  AND  ISSUES 

Before  proceeding  with  the  process  of  evaluating  the  effects  of 
mechanizing  the  elements  and  links  of  the  actuation  system  using  digital 
tecnnology,  it  was  necessary  to  establish  a  baseline  configuration  of 
known  performance.  This  baseline  configuration  Is  defined  in  detail  in 
Appendix  B. 

From  this  baseline  departure  point  it  was  then  possible  to 
analyze  the  effects  of  digital  equipment  substitution  for  the  analog 
equivalents.  However,  the  simplicity  of  digital  inputs  and  outputs  and 
their  interconnection  technologies  gave  rise  to  options  about  where  the 
element  could  be  located  -  in  proximity  to  the  control  processor,  at  the 
actuator,  or  in  an  aircraft  compartment  between. 

In  addition  to  the  issue  of  location,  other  issues  arose,  and 
the  process  of  design  of  alternative  system  configurations  became  an 
iteration  process  between  issues  and  element  design. 

1 .  Issues 

As  as  previously  discussed,  design  options  required  detailed 
evaluation.  This  process  began  with  a  top-down  approach  considering  the 
overall  system  issues  first.  Their  determination  then  led  to  the  next 
level  of  issues  and  so  on.  Figure  2  depicts  this  progression. 

The  issues,  briefly  described  below,  are  analyzed  in  detail  in 
Section  III. 


OTHeR 


Figure  2.  Technical  Design  Issues  Affecting  Actuation 
System  Configurations 


•  Flight  Control  Actuation  Redundancy  Architecture: 

Basic  architecture  to  achieve  redundancy  and  reliability 
objecti ves 

e  Functional  Partitioning: 

Designation  of  functions  to  be  performed  in  each  actua¬ 
tion  system  element. 

•  Physical  Distribution: 

Physical  location  of  each  actuation  system  element. 

•  Bus  Configuration: 

Format,  protocol,  and  application  of  digital  data  buses. 
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•  Environment 

Electronics  compatible  with  an  uncontrolled  temperature 
environment. 

•  Servo  Actuation  Unit  Mechanization: 

Digital  mechanization  of  electrohydraul ic  valves,  feed¬ 
back  elements,  and  actuator  power  cylinders. 

2.  Configurations  -  Five  configurations  were  ultimately  selected 

by  this  iterative  design  process.  These  are  not  only  applicable  to 
flight  control  systems,  but  provide  a  vehicle  for  evaluating  and  de¬ 
monstrating  the  technical  issues  involved.  The  configurations  are 
depicted  in  figure  3.  It  should  be  noted  that  they  progressively  show 
more  use  of  digital  technology  by  virtue  of  element  mechanization  or  by 
element  physical  location,  introducing  digital  communication  buses  in 
lieu  of  hardwire  Interconnections. 

A  detailed  description  of  each  configuration  is  provided  in 
Section  iv.  The  following  is  a  brief  description  of  each  and  a  dis¬ 
cussion  as  to  why  the  configuration  was  chosen: 

Baseline  -  All  configurations  are  referenced  to  the  baseline. 

It  Is  an  active-on-line,  triplvx  system  employing,  per  surface,  a  triple 
tandem  power  stage  (ram),  three  servo  valves,  and  three  servo  proces¬ 
sors.  The  control  processors  are  a  triplex  pair  which  are  self-checked 
through  their  servo  processors,  which  also  monitor  the  actuator  complex. 
For  a  12-surface  system,  all  12  servo  amplifiers  per  channel  are  housed 
in  one  enclosure  with  their  host  control  processor. 

This  configuration  was  specified  because  it  does  not  require 
compute*  synchronization  or  cross-channel  monitoring  except  to  signal 
reconfiguration  logic,  thus  simplifying  the  electronics  while  providing 
two- fall -operate  redundancy.  This  system  is  all  analog. 

Configuration  I  -  Same  as  baseline  except  the  control  pro¬ 
cessors  are  digital.  A  digi tal-to-anal og  convorter  and  notch  filter  are 
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Figure  3.  Configuration  Vs  Element  Features 

installed  at  the  input  to  the  servo  processors  to  smooth  out  the  control 
processor's  sample  rate  signal*  Loop  closure  and  redundancy  management 
are  performed  by  analog  circuits  in  the  servo  processor. 


This  configuration  was  selected  to  analyze  the  effects  of  3 
digital  sample  rate  command  signal  on  hydraulic  systems  and  components. 
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Digital-to-analog  conversion  Is  In  the  servo  processor  in  the  avionics 
bay. 


Configuration  II  -  Same  as  I  except  that  each  of  the  three 
channels  of  12  servo  processors  are  packaged  together  in  a  separate, 
temperature-control! ed  bay  from  that  of  the  control  processors.  Inter¬ 
connections  between  a  control  processor  and  its  servo  processors  are  by 
means  of  a  digital  serial  bus. 

This  configuration  was  selected  to  evaluate  the  use  of  the 
MIL-STD-1553B  bus  and  its  traffic  as  a  function  of  performing  redundancy 
management  and  other  functions  in  the  servo  processor  or  in  the  control 
processor.  Digital-to-analog  conversion  is  in  the  servo  processor  in  an 
intermediate  location  between  avionic  bay  and  actuator. 

Configuration  III  -  Same  as  I  and  II  except  the  servo  proces¬ 
sors  are  located  at  the  actuators.  This  results  in  12  groups  of  three 
servo  processors  and  places  the  servo  processors  in  a  "high  tempera !urp" 
environment. 

This  configuration  was  chosen  to  evaluate  the  MII-STD-1553B 
serial  bus  under  a  different  servo  processor  grouping  configuration.  It 
also  provides  an  analysis  of  the  effects  of  the  uncontrolled  temperature 
environment  of  the  actuator  on  the  performance  and  reliability  of  the 
servo  processor.  Digital-to-analog  conversion  is  In  the  servo  processor 
at  the  actuator  location. 

Configuration  IV  -  This  configuration  continues  to  place  the 
servo  processors  at  the  actuators.  However,  dual  microprocessors  are 
employed  in  each  servo  processor  to  interface  with  three  serial  buses 
connecting  each  servo  processor  with  the  three  sets  of  control  proces¬ 
sors.  Servovalve  modeling  and  redundancy  management  are  performed 
digitally  in  the  microprocessor. 

This  configuration  was  chosen  to  evaluate  the  effect  on  system 
reliability  of  employing  a  voting  plane  at  the  servo  processor-actuator . 
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It  also  demonstrates  the  use  of  a  microprocessor  In  the  servo  processor 
-  the  so-called  "smart  actuator"  concept.  Approximately  half  of  the 
servo  processor  functions  are  performed  digitally. 

Configuration  V  -  This  configuration  is  all  digital  except  for 
the  ram  Itself.  It  also  employs  a  microprocessor  pair  in  the  servo 
processor  units  which  performs  all  functions  in  a  digital  format. 
Feedback  position  and  pressure  transducers  are  digital  encoders. 

This  configuration  was  chosen  to  demonstrate  the  all -digital 
servo  processor  and  its  relationship  to  digital  elements  in  a  servo 
actuator  complex.  Digital-to-snalog  conversion  is  accomplished  in  the 
servovalve. 

C.  EVALUATION 

These  selected  configurations  were  evaluated  using  an  HR 
Textron-developed  nonlinear  dynamic  simulation  mathematical  model  to 
analyze  the  performance  of  the  various  flight  control  system  configura¬ 
tions.  The  model  was  used  to  evaluate  performance  in  the  fo'li owing 
areas:  system  stability,  transient  step  response  (includes  slew  rate, 
over-  shoot,  settling  time),  frequency  response,  resolution,  and  failure 
transients.  A  detailed  description  of  the  equations  and  relationships 
comprising  the  nonlinear  model  is  presented  in  Appendix  C. 

Estimates  were  made  of  factors  affected  by  physical  config¬ 
uration  such  as  weight,  volume,  reliability,  and  cost. 

Since  certain  of  the  configurations  involved  the  use  of  tech¬ 
nologies  not  presently  developed  or  in  full  production,  some  qualitative 
assessments  were  made  by  HR  Textron  experts  in  those  fields  and  compared 
to  the  baseline. 

Final  results,  conclusions,  and  recommendations  for  future 
development  were  then  made  with  projections  for  anticipated  maturation 
of  new  technologies. 


SECTION  III 
DESIGN  ISSUES 


This  section  addresses,  In  detail,  the  design  Issues  that  came 
up  for  analysis  as  the  configurations  described  in  figure  3  took  shape. 
Given  the  flexibility.  Increased  capability,  and  higher  reliability  of 
digital  technology,  the  task  became  one  of  determining  how  the  use  of 
digital  techniques  In  these  configurations  could  enhance  the  overall 
system. 


These  design  issues  are  derived  from  detailed  configuration 
designs  contained  in  Section  IV: 

•  Redundancy  architecture  to  achieve  reliability  objectives. 

«  Distribution  of  functions  to  be  performed  by  each  element  In 
the  actuation  system. 

e  Physical  distribution  of  the  actuation  system  elements. 

•  Format,  protocol,  and  application  of  digital  data  buses. 

•  Electronics  compatible  with  an  uncontrolled  environment. 

•  Digital  mechanization  of  servo  actuator  elements. 

•  Digital  control  processor  sample  data  rate  effects  on  the 
hydraulic  system. 


MB 
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A. 


REDUNDANCY  ARCHITECTURE 


The  ground  rules  established  the  use  of  an  active-on-line 
hydraulic  actuator  configuration  for  all  system  configuration  studies. 

The  active-on-line  system  provides  fail-operate,  fall -operate, 
fall -safe  redundancy  without  cross-channel  comparisons  or  voting  schemes 
and  with  only  three  channels.  The  threshold,  hysteresis  and  failure 
transients  compare  very  favorably  with  the  force-sharing  concept.  This 
evaluation  was  verified  in  a  study,  "The  Evaluation  of  a  Force-Sharing 
and  an  Active-on-line  Fly-by-Wire  Actuation  System,"  Dynamic  Controls, 
Inc.  Technical  Report  AFFDl-TR-79-3117  Vol .  II,  July  1980. 

A  schematic  of  an  active-on-line  actuation  scheme  Is  shown  in 
figure  4.  In  this  scheme  there  are  three  channels,  each  having  an 
electrohydraul ic  servovalve  (EHSV)  controlling  flow  to  one  ram  of  a 
triple-ram  actuator.  One  channel  is  active  and  controls  the  static 
position  of  the  load.  The  remaining  two  channels  are  on-line.  The 
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on-line  channels  are  characterized  by  Introducing  pressure  feedback 
signals  which  are  passed  through  a  simple  lag  circuit  and  then  sub¬ 
tracted  from  the  error  signal  between  the  position  command  from  the 
flight  control  processor  and  the  ram  position  feedback.  This  results  In 
a  greatly  reduced  static  pressure  gain  In  the  on-line  channels,  so  that 
they  carry  very  little  of  the  static  load,  eliminating  the  force-fight 
problem.  However,  because  of  the  simple  lag,  they  share  the  load 
dynamically,  and  this  reduces  transients  (In  the  event  of  a  hardover 
channel  failure)  to  a  level  comparable  to  that  of  a  forcesharing 
configuration. 

Should  there  be  a  failure  in  any  channel,  a  bypass  valve  In 
that  channel  is  opened,  removing  that  channel  from  influence  on  the 
system.  If  the  failed  channel  is  the  active  channel,  the  pressure  feed¬ 
back  on  one  of  the  standby  channels  Is  eliminated,  making  that  channel 
active.  In  the  event  of  a  second  channel  failure,  the  above  sequence  is 
repeated.  Again,  if  the  failed  channel  Is  the  active  channel,  the  pres¬ 
sure  feedback  on  the  remaining  standby  channel  is  eliminated,  making  it 
active. 


Because  it  Is  very  inefficient  powerwlse,  the  output  of  the 
active-on-line  ram  described  In  this  report  would  normally  be  used  as 
input  to  the  valving  for  a  power  ram  to  drive  the  control  surfaces. 
However,  for  this  analysis  it  was  decided  not  to  introduce  the  com¬ 
plexity  of  an  additional  power  stage  since  it  would  be  common  to  all  the 
configurations  and  would,  therefore,  only  dilute  any  comparisons  between 
them.  Thus,  It  Is  assumed  tt at  the  active-on-line  ram  Is  of  a  size  to 
drive  the  control  surfaces  directly. 

Servo  Processor  Configurations  -  In  the  paragraphs  above,  the 
basic  hydraulic  active-on-line  scheme  was  described,  and  It  is  carried 
through  to  all  configurations.  The  servo  processor  relationships  to  the 
control  processor  and  servo  valve  make  up  the  difference  In  the  study 
configurations. 
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Failure  detaction  Is  totally  In-line  and  Is  accomplished  within 
each  channel  servo  processor  by  dual  monitors,  each  of  which  compares 
the  position  of  the  spool  of  the  EHSV  t'lth  the  output  of  an  electronic 
EHSV  model.  The  same  feedback  signals  (Including  pressure  feedback  In 
the  on-line  channels)  are  Input  to  the  EHSV  and  to  the  EHSV  models  of  a 
given  channel .  The  two  monitors  are  used  for  redundancy:  a  detected 
failure  with  either  monitor  will  fail  the  channel.  Each  monitor  Is 
driven  by  one  of  a  control  processor  pair,  so  that  the  control  processor 
pair  Is  also  monitored.  There  is  a  single  self-monitored  LVDT  in  each 
channel  for  ram  position  feedback  and  for  pressure  feedback  In  the  on¬ 
line  channels. 

As  will  be  seen  in  Configuration  II,  where  a  dual  parallel  data 
bus  is  employed,  the  feature  of  dual  monitors  In  the  servo  processors 
also  monitors  the  internal  parallel  bus  system. 

In  Configuration  III  three  serial  buses  communicate  with  three 
servo  processors  at  each  actuator  location.  This  provides  for  high 
redundancy  since  the  failure  of  a  bus  can  only  disable  rne  channel  cf  an 
actuator. 

Configuration  IV  provides  for  the  highest  redundancy  since  it 
Incorporates  a  voting  plane  where  the  input  of  all  serial  buses  is  fed 
to  all  servo  processors.  This  concept  goes  beyon-J  the  ground  rules  for 
an  active-on-line  system,  but  is  incorporated  to  demonstrate  that  reli¬ 
ability  may  be  enhanced  when  servo  processor  reliability  is  decreased 
due  to  the  unfavorable  temperature  environment  of  that  configuration. 


B.  FUNCTIONAL  DISTRIBUTION 

The  architectures  of  the  actuation  system  configurations  from 
baseline  to  Configuration  V  are  marked  by  a  trend  to  distributed  sys¬ 
tems.  Technology  developments  which  have  made  or  will  make  this  pos¬ 
sible  are  the  microprocessor,  digital  circuits,  the  serial  data  bus  and, 
high  temperature  electronics. 

The  advantages  of  a  distributed  system  architecture  are  attrac¬ 
tive.  By  taking  tasks  out  of  the  central  computer  and  assigning  than  to 
their  logically  associated  peripherals,  the  central  computer's  workload 
can  be  reduced.  The  central  computer  can  now  perform  a  system  manage¬ 
ment  role,  with  detail  functions  being  performed  by  the  distributed 
subsystems. 

Advanced  System  Considerations  -  Current  flight  control  systems 
have  evolved  into  "centralized"  system  archi lectures.  This  is  to  say. 
that  a  single,  central,  flight  control  computer  (even  though  redun- 

M*c  all  nf  tho  r  nmrm  t » t  •»  nn»  "I  associated  with  the 
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necessary  sensors  and  actuators  to  control  the  aircraft. 

Future  aircraft  of  statically  unstable  airframe  designs,  and 
the  operational  need  to  perform  more  specialized  maneuvers,  will  impose 
tighter  structural  limits  and  more  complex  control  problems.  Integra¬ 
tion  of  flight  controls  with  other  systems,  such  as  engine  controls, 
will  increase  the  management  scope  of  the  flight  control  computer" s 
task . 

The  introduction  of  modern,  high  speed,  digital  computers  has 
brought  about  greater  computational  power.  However,  if  the  "centra¬ 
lized''  system  approach  is  continued,  the  additional  communication  and 
computation  requirements  to  achieve  integration  will  drive  the  size, 
speed,  and  complexity  of  this  centralized  computer  ever  upward. 

The  Honeywell  study  and  report  on  a  "Multi -Microprocessor 
Flight  Control  System"  reaches  the  conclusions  that  the  most  logical 
solution  is  to  partition  the  system  into  its  sensor  processing,  control 
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laws  processing,  and  servo  processing  functions  and  t.o  partition  between 
these  units  along  functional  lines.  With  the  advent  of  the  micro¬ 
processor  and  Its  Inherent  advantages  (small  size  and  low  cost),  the 
distribution  of  tasks  from  a  central  flight  control  computer  Is  not  only 
quite  achieveable  but  can  also  enhance  overall  system  computational 
capacity. 


Computational  Load  -  Partitioning  of  systems  was  discussed 
above  from  the  viewpoint  of  an  overload  of  the  control  processor.  Part 
of  that  overload  has  to  do  with  the  capacity  of  a  computer  to  perform 
all  the  tasks  required  In  the  time  available.  Considering  that  problem 
in  the  present  system  examples  shows  that  every  unique  servo  processor 
function  performed  In  the  control  processor  must  be  performed  12  times. 
Real-time  functions,  such  as  loop  closures,  are  very  capacity  limiting. 


Simplification  of  Interfaces  -  A  general  guide  to  functional 
distribution  is  to  simplify  the  data  exchange  between  units.  For 
example,  if  all  functions  of  loop  closure,  failure  detection,  and  re- 
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gsment  arc  performed  1 r  the  12  servo  processors  of  each 


channel  instead  of  in  the  control  processor,  the  data  exchange  between 
control  processor  and  servo  orocessors  could  consist  of: 


•  Position  command 

•  Actuator/servo  processor  status  to  control  processor 

Any  combination  of  loop  closure,  failure  detection,  or  redun¬ 
dancy  management  functions,  which  are  includeo  in  the  program  control  of 
the  flight  control  processor,  will  Increase  the  data  exchange.  The 
magnitude  of  this  effect  differs  between  configurations  and  is  discussed 
under  Section  III,  "Serial  Data  3us." 


C.  PHYSICAL  DISTRIBUTION 

Physical  partitioning  decisions  are  based  on  the  effects  and 
benefits  of  placing  the  servo  processors  In  the  avionics  bay,  at  other 
strategic  locations,  or  at  each  actuator  itself  (figure  5). 
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Figure  5.  Physical  Location  Options 


The  serial  data  bus,  introduced  in  Configuration  II,  can  trans¬ 
fer  data  at  a  rapid  rate  with  verification  at  the  receiving  end.  This 
has  led  to  the  design  and  implementation  of  physically  distributed  sys¬ 
tems,  which,  when  complemented  with  "high-temperature  electronics",  will 
allow  the  servo  processor  to  be  incorporated  with  the  actuator  itself. 


The  following  descriptions  of  Configurations  I  through  III 
shows  the  equipment  relationships  between  control  processor,  servo  pro¬ 
cessor,  and  actuator,  including  the  data  bus  variations  involved. 

Configuration  I  -  This  configuration  is  represented  by  fig¬ 
ure  6.  Details  can  be  found  1r«  Section  IV,  figures  29,  30,  and  31.  It 
is  significant  to  note  that  for  each  control  processor  channel  there  are 
as  many  analog  servo  processors  as  there  are  control  surface  actuators. 
Thus,  for  12  control  surfaces,  there  are  12  channel  A  servo  processors. 
These  12  channel  A  servo  processors  are  physically  grouped  together  in 
the  same  enclosure  with  the  channel  A  pair  of  control  processors.  The 
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Figure  6.  Configuration  I  Physical  Locations 


resulting  three  enclosures  (channels  A,  B,  and  C)  are  physically 
dispersed  within  the  avionics  bay. 

Since  the  servo  processors  are  packaged  with  control  processors 
in  the  same  electronic  enclosure  and  share  the  same  power  supply,  the 
interwiring  between  them  can  be  handled  by  t\  o  digital,  parallel  buses, 
both  common  to  all  12  servo  processors  in  the  enclosure  and  implemented 
by  means  of  mother  board  connections. 

This  interconnection  density,  however,  approximates  10  per 
servo  processor  or  120/channel  for  an  aircraft  with  12  control  surfaces. 
There  are  also  a  significant  number  of  interconnect  wires  (49)  between 
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each  actuator  complex  and  the  computer  complex.  For  an  aircraft  having 
12  flight  control  surfaces,  this  represents  588  interconnections  of 
aircraft  group  A  wiring. 

Configuration  II  -  This  configuration  is  representative  of  a 
physically  distributed  system.  In  Configuration  II  (figure  7)  the  servo 
processors  are  grouped  by  channel  designator  A,  8,  or  C.  This  results 
in  three  enclosures  each  containing  twelve  servo  processors  located  in 
one  or  more  separate  temperature-controlled  bays. 

Each  servo  processor  enclosure  has  its  own  power  supply  which 
is  conrnon  to  all  servo  processors  within  the  enclosure. 
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The  control  processor/servo  processor  link  is  now  a  serial  bus 
between  control  processor-servo  enclosures.  Parallel  bus  data  distri¬ 
bution  is  used  within  servo  processor  enclosures,  similar  to  Config¬ 
uration  I.  Connections  from  servo  processors  to  actuator  (group  A  -  588 
wires)  are  the  same  as  In  the  baseline  and  Configuration  I,  although 
shorter  due  to  the  servo  processor  locations. 

Configuration  III  -  Figure  8  shows  a  physical  layout  for  Con¬ 
figuration  III.  The  servo  processors  are  now  located  at  the  actuator 
itself.  It  should  also  be  noted  that  contrary  to  Configurations  I  and 
II,  where  the  servo  processors  were  collected  in  three  groups  of  12, 
they  are  now  colTected  in  12  groups  of  three. 
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Figure  8.  Configuration  III  Physical  Locations 
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Each  servo  processor  has  its  own  dedicated  power  supply  and 
monitors.  The  actuator/servo  processor  multi wire  interface  is  now  very 
short.  The  control  processor/servo  processor  serial  bus  is  now  dis¬ 
tributed  to  all  actuator  locations.  All  data  exchanged  between  each 
servo  processor  and  its  control  processor  is  via  a  serial  digital  bus. 
Each  servo  processor  has  its  own  reconfiguration  logic,  and  its  fail 
status  Is  exchanged  by  means  of  dedicated  wires  between  the  servo  pro¬ 
cessors  serving  a  particular  actuator. 
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D.  SERIAL  DATA  BUS  -  FORMAT,  PROTOCOL,  AND  APPLICATION 

The  following  analyses  will  evaluate  the  applicability  of  the 
MIL- STD- 1553B  bus  to  a  control  processor-servo  processor  Interface. 
MIL-STD-15538  is  the  standard  for  serial  data  transmission. 

Under  MIL-STD-15538  specifications,  there  must  be  a  bus  con¬ 
troller.  There  are  two  choices: 

•  Each  control  processor  could  be  a  bus  controller.  This 
would  have  an  undesirable  effect  on  the  control  processor's 
ability  to  accomplish  its  main  function. 

o  An  autonomous  bus  controller  could  be  utilized  that  treats 
both  the  control  processor  pair  and  each  servo  processor  as 
a  remote  terminal. 

Trade-offs  will  be  the  effect  on  redundancy  management  and  on 
the  tfme  required  to  process  the  bus  traffic.  For  the  purposes  of  this 
study,  the  second  option  is  assumed.  However,  the  bus  controller  is 
physically  integrated  with  the  control  processor. 

Dedicated  Bus  Interface  -  If  all  control  processor  commands 
were  transmitted  on  the  same  bus,  any  bus  failure  would  totally  disable 
the  actuator  -  an  unacceptable  single-point  failure.  Each  servo  pro¬ 
cessor  channel  of  an  actuator  must  interface  with  a  different  control 
processor  on  a  physically  different  serial  bus.  With  three  physically 
different  serial  buses,  the  failure  of  any  one  bus  disables  only  one 
channel  of  the  actuators. 

Remote  Location  Environments  -  The  servo  processor  of  Con¬ 
figuration  III  will  be  remotely  mounted  in  locations  where  space  is 
limited.  This  will  require  special  nigh  temperature  components  and  the 
use  of  hybrid  microelectronic  packaging  techniques.  Presently  available 
MIL-STD-15538  transmitter-receivers,  when  Implemented  with  hybrid  tech¬ 
nology  and  screened  to  MIL-STD-883B ,  are  prohibitive  in  size  and  have 
costs  approaching  $1000  per  bus  interface  unit. 
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In  considering  the  type  of  bus  for  flight  control  actuation 
standardization,  a  trade-off  should  be  made  between  hardware  require¬ 
ments  and  bus  protocol.  That,  along  with  the  integration  of  the  termi¬ 
nal  with  the  servo  processor,  should  provide  a  smaller  overall,  lower- 
cost  product. 

MIL-STD-1553B  Protocol  -  Figure  9  represents  the  protocol  for 
this  data  bus. 

Data  transfer  between  terminals  Is  directed  by  a  bus  con¬ 
troller.  Transfer  is  initiated  by  two  commands  which  select  sending  and 
receiving  terminals.  The  receive  and  transmit  commands  include  the  ad¬ 
dresses  of  the  terminal  to  receive  the  transmission  and  that  of  the 
terminal  which  will  transmit.  The  status  words  (from  each)  are  used  to 
verify  the  action  being  performed. 

MIL-STP-1553B  Format  Overhead  -  Calculated  below  Is  the  over¬ 
head  for  each  transmission  based  on  figure  9.  The  equivalent  of  5.4 
words  must  be  sent  with  each  transmission  on  the  bus  to  define  which 
elements  will  transmit  and  receive  and  to  verify  the  transmission  of  the 
data. 


RECEIVE 

STATUS  WORD 

COMMAND 

(FROM  TRANSMITTING  TERMINALI 

i 

/ 

•  l:  ,.i  i  Tinzi-  cp « 

/ 

DATA  WORDS  f 

TRANSMIT 

1 

STATUS 

COMMAND 

WORD 

(FROM  CONTROLLER)  (RECEIVING 

1 _ 

TERMINAL) 

**  INCHOATES  RESPONSE  TIME  ALLOWANCE 
#  INDICATES  MESSAGE  GAP  ALLOWANCE 


Figure  9.  Remote  Terminal-to-Remote  Terminal  Transfer 
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Format  Overhead  for  One  Data  Transmission 

Words 

Time 

M-sec 

Sus  Controller  (BC)  issues  receive  command 

1.0 

20 

Eus  Controller  issues  transmit  command 

1.0 

20 

Maximum  delay 

0.6 

12 

Transmitting  terminal  issues  status  to  BC 

1.0 

20 

Maximum  delay  after  data  transmission  (**) 

0.6 

12 

Receive  terminal  sends  status  to  BC 

1.0 

20 

Delay  before  next  transmission  cycle  (#) 

0.2 

4 

Total  nondata  time  in  each  transmission 

5.4 

108 

When  a  significant  number  of  data  words  are  sent  with  each 
transmission,  the  5.4  data  word  "overhead"  is  not  critical.  However, 
when  the  number  of  data  words  are  less  than  five  words  per  transmission, 
more  time  Is  spent  for  overhead  than  is  required  to  transmit  the  data. 

Maximum  Data  Exchange  -  The  maximum  number  of  words  that  can  be 
exchanged  in  a  typical  flight  actuation  application  is  shown  below: 

Assumptions:  12  actuator  channels 

100  Hz  update  rate  each  channel 
(10,000  sec.  period) 

2  transmissions  per  channel  update: 

1  from  control  processor 
1  from  servo  processors 

Assuming  a  design  limit  of  70%  bus  util Ization,  the  time  for  each  chan¬ 
nel  update  is:  10,000  x  70%/12  =  583. 3  sec. 

Overhead  for  2  transmissions:  (108  x  2)  *  -216  sec. 

Time  available  for  data  words:  367.3  sec. 

rime  for  1  data  word:  20  sec. 

Total  words  exchanged  in  1  update:  18.36  words 
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This  shows  that  if  two  transmissions  were  required  per  channel 
update  a  maximum  of  18  data  words  (total)  could  be  exchanged.  If  three 
transmissions  were  required  per  channel  update,  the  total  allowable  data 
words  that  could  be  exchanged  in  all  three  transml sslons  would  be  re¬ 
duced  to  twelve. 

MIL-STD-1553B  Capability  -  We  have  specified  the  sample  data 
rate  of  the  control  processor  to  be  100  Hz  (10,000  usecond  period). 

The  1553B  format  has  a  maximum  allowance  of  32  data  words  per  trans¬ 
mission.  The  number  of  transmissions  possible  is  then  based  on  the 
overhead  plus  the  data  words.  We  have  previously  developed  the  overhead 
for  one  data  transmission  (in  either  direction),  and  from  MIL-STD-15533 
we  know  the  length  of  one  word. 


Time 

Words  (usee) 


Period  (100  Hz)  10,000 
Overhead  5.4  108 
Data  Words  1  20 


The  percent  usage  of  the  bus  (which  should  not  exceed  70%)  can 
be  calculated  as  follows: 


%  Bus  Utilization 


/  overhead  time  +  data  word  time 
\  time  allotted 


x  100 


_  (transmissions  x  108  usec)+{data  words  x  20  usee)  „  ,n(1(l) 
- ID' ,'000  psec - X  100 


We  can  now  evaluate  configurations  II,  III  and  IV  to  determine 
the  factors  which  dictate  the  number  of  data  words  required  and  the 
number  of  transmissions  required  per  sample  data  period. 
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Configuration  II  Serial  Data  Bus  -  In  this  configuration 
(figure  10)  the  12  servo  processors  for  a  given  channel  are  housed  to¬ 
gether  In  a  separate  compartment  remote  from  that  of  the  control  proces¬ 
sor.  When  the  control  processor  and  servo  processor  are  in  seoarate  en¬ 
closures,  bus  timing,  connector  size,  and  least  number  of  Interface 
wires  all  favor  using  a  serial  bus  as  the  data  link. 

The  serial  data  from  the  control  processor  pair  Is  translated 
to  a  parallel  format  within  t.he  enclosure  for  distribution  to  each  servo 
processor.  The  addition  of  th  parallel  bus  and  control  logic  makes  it 
possible  to  utilize  only  one  serial-parallel  translation  circuit  for  all 
servo  processors.  Weight,  cost,  and  system  complexity  favor  this 
approach. 


Configuration  II  -  Bus  Utilization  -  Transmissions  per  sample 
data  period  required  for  Configuration  II,  assuming  that  redundancy 
management  and  loop  closure  are  performed  in  the  servo  processor,  are  as 
fol lows: 


channel  a  bus 


Figure  10.  Configuration  II  Serial  Data  Bus 
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Transmissions 
1  (CP  -  SP)  of: 


Data  Words 
1  -  CP  fall-status 
12  -  position  commands 


1  (SP  -  CP)  of: 

2 


2  -  SP  fail  status 


Using  equation  (1)  shows: 


?8us  Utilization  =  ..(2.xl^^,(J5x-20-l  x  IQO  -  5? 


Since  only  one  update  cycle  is  required,  the  bus  has  almost  14 
times  the  capacity  required  (70?  being  the  upper  limit). 


A  calculation  was  made  to  evaluate  the  data  bus  load  if  a  func¬ 
tion,  such  as  redundancy  management,  were  performed  in  the  control  pro¬ 
cessor  instead  of  in  the  servo  processor.  This  would  require  sending 
all  required  data  to  the  control  processor. 


Since  a  given  transmission  is  limited  to  32  words,  the  re¬ 
dundancy  management  data  words  are  split  up  into  four  separate 
transmi ssi ons . 


Transmissions 
1  (CP  -  SP)  of: 


Data  Words 
1  -  CP  fail-status 
12  -  position  commands 


4  (SP  -  CP)  of: 


32  -  (4x8)  redundancy  mgmt. 
inputs 

13  +  (32x4)  *  141 


Using  equation  (1)  shows: 


?Bus  Utilization  =  ( 5x1  1  x  100  =  34? 
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This  calculation  shows  that  the  data  bus  would  accommodate  this 
data  traffic.  However,  this  Illustration  bears  out  the  benefits  of 
proper  functional  distribution  as  discussed  under  "Functional  Partition¬ 
ing"  since  the  data  bus  utilization  increased  from  5%  to  34%. 

Configuration  III  Serial  Data  Bus  -  In  Configuration  III  the 
servo  processors  are  grouped  at  the  actuator,  with  each  of  the  three 
units  representing  a  different  control  processor  channel  {figure  11). 

For  reference,  figure  36  In  Section  IV,  Is  the  block  diagram  of 
the  serial  bus  interface  which  is  resident  in  each  servo  processor.  The 
serial  bus  is  bidirectional.  The  "fail  status"  of  both  sides  of  th* 
servo  processor  are  transmitted  back  to  the  control  processor.  This 
interface  differs  from  Configuration  II  in  that  each  servo  processor 
must  have  a  dedicated  bus  interface.  The  functions  of  the  bus  Interface 
have  now  been  slightly  reduced.  The  "word  decode  and  control"  function 
now  has  only  the  input  for  oi.e  control  processor  to  control,  rather  than 
all  servo  processors  of  the  same  channel. 

With  Configuration  III  the  economy  of  common  bus  transceivers 
and  power  supplies  has  been  lest.  However,  the  possibility  of  some 
single  point  failures  that  can  disable  one  third  of  all  the  actuator 
channels,  has  also  been  eliminated. 

channel  a  bus 

CHANNEL  0  BUS 


channel  c  bus 


Figure  11.  Configuration  III  Serial  Data  Bus 
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Configuration  III  Bus  Utilization  -  Transmissions  per  sample 
data  period,  assuming  that  redundancy  management  and  loop  closure  are 
performed  In  the  servo  processors,  are  as  follows: 


Transmissions  Data  Words 

12  (CP  *►  SP)  of:  1  -  CP  fail  status 

1  -  position  command 


12  (SP  -  CP)  of:  _1  -  SP  fall  status 

24  3  x  12  «  36 


However,  there  are  now  12  servo  processors  to  be  dealt  with 
separately,  calling  for  24  transmissions  per  sample  data  period. 

Using  equation  (1)  shows: 


%Bus  Utilization 


(24x108)  +  (36x20) 


x  100  =  33% 


If  it  were  now  intended  to  perform  redundancy  management  in  the 
control  processor: 

Transmissions  Data  Words 

12  (CP  SP)  of:  1  -  CP  fail  status 

1  -  position  command 


12  (SP  CP)  of: 
24 


I  -  SP  fail  status 

8  -  redundancy  mgmt  inputs 

II  x  12  *  132 


Using  equation  (1)  shows: 


%8us  Utilization 


(24x108)  +  (132x20) 

- TOTUffO - 


x  100  *  52% 


Tne  bus  can  handle  this  traffic.  This  example  illustrates  the 
strong  effect  of  the  overhead  protocol  of  the  MII-STD-1553B  bus  capacity 
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when  a  high  number  of  transmissions  are  required,  since  adding  the  re¬ 
dundancy  management  data  words  had  less  effect  than  In  C<  figuration  II. 

Configuration  IV  Serial  Data  Bus  -  This  configure  on  was  in¬ 
troduced  to  show  how  a  voting  plane  in  servo  processors,  located  at  the 
actuator,  could  improve  reliability,  if  necessary.  It  involves  imple¬ 
mentation  with  dual  microprocessors  In  the  servo  units. 

In  Configuration  IV,  commands  from  each  control  processor  are 
routed  by  data  bus  to  all  servo  processors  (figure  12).  Thus,  each  con¬ 
trol  processor  talks  to  36  servo  processors.  It  would  not  be  feasible 
to  carry  that  traffic  without  using  the  "broadcast  mode"  of  the  MIL- 
STD-1553B  bus  protocol.  In  this  mode,  the  CP  controller  issues  a  re¬ 
ceive  command  to  a  specific  address,  "31",  followed  by  the  necessary 
data  words.  Terminals  (servo  processors)  are  equipped  to  recognize  the 
broadcast  command  and,  therefore,  receive  that  particular  data.  No 
status  commands  are  issued. 

Configuration  IV  Bus  utilization  -  Transmissions  per  sample 
data  period  for  one  bus  are  as  follows: 


BUS  A 


Figure  12.  Configuration  IV  Serial  Data  Bus 
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Data  Words 


Transmission 

12  (CP  broadcast  to  each 
surface's  SP's) 


12  (SP  "A"  broadcast  to 
CP-A  and  to  all  SP's) 

12  (SP"C"  broadcast  to 
all  SP's) 

12  ( SP "C"  broadcast  to 
_  CP-C  and  to  all  SP's) 
48 

Using  equation  (1) : 


1  -  reset 

1  -  position  command 
1  -  CP  fall  status 

1  -  SP"A"  fail  status 

1  -  SP"B"  fail  status 

1  -  SP"C”  fail  status 

(6  x  12)  =  72 


%Bus  Utilization 


(48x108)  +  (72x20) 

- TTT7KTQ - 


X  100  =  66% 


This  shows  that  the  bus  has  the  capacity.  However,  it  should 
be  noted  that  this  is  only  possible  because  the  "broadcast"  mode  of 
MIL-ST0-1553B  is  employed.  What,  is  sacrificed  is  the  verification  that 
transmissions  have  been  received. 


There  was  no  need  to  consider  redundancy  management  at  the 
control  processor  in  view  of  the  use  of  microprocessors  in  the  servo 
processors. 


33 


E. 


HIGH  TEMPERATURE  ELECTRONICS 


The  Environment  -  Configuration  III  has  physically  distributer! 
the  servo  processor  to  be  integrated  with  the  actuator.  This  poses  a 
problem  of  obtaining  electronic  components  which  can  withstand  that 
temperature  environment. 

Conceivably,  a  controlled  environment  for  the  servo  processor 
could  be  created  at  the  actuator.  This  would  require  a  heat-exchange 
system  at  each  actuator  location.  From  an  overall  aircraft  design  view¬ 
point,  this  would  be  undesirable,  adding  weight  and  complexity  as  well 
as  accessibility  problems  for  maintenance.  The  more  attractive  alterna¬ 
tive  is  to  develop  electronics  capable  of  surviving  the  uncontrolled 
environment.  The  packaging  technology  for  a  servo  processor  which  can 
withstand  the  vibration,  shock,  altitude,  and  contaminants  (sand/dust/- 
oil)  of  such  an  uncontrolled  environment  is  available  today.  The  major 
environmental  problem  Is  temperature. 

One  source  of  'neat  is  the  valve-actuator  hydraulic  fluid,  which 
is  heated  as  work  is  performed  on  it.'  The  val ve-actuator  body  itself 
may  experience  temperatures  from  -65°F  (-54°C)  to  +  ?75°F  (+135°C)  in  a 
type  II  hydraulic  system.  Another  source  of  heat  comes  from  aerodynamic 
heating  of  stagnant  compartment  air  as  a  function  of  aircraft  speed. 
These  temperatures  have  been  quoted  {for  fighter  aircraft)  as  between 
10°C  to  71°C  for  cruise  conditions,  132°C  maximum  for  a  10  minute  dash, 
and  168°C  maximum  for  a  2  minute  dash  {figure  13).  A  similar  source, 
depending  upon  the  installation,  could  be  heat  radiated  from  nearby 
engines. 


Heat  generated  by  the  electronics  itself  is  a  third  source,  and 
this  can  be  affected  by  the  circuit  design  approach  employed. 

Even  under  these  conditions  of  temperature,  it  can  be  shown 
that  with  the  development  of  three  technologies,  reliability  can  be 
comparable  with  present  equipments  which  are  housed  in  conditioned 
environments. 
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Figure  13.  Temperature-Altitude  Requirements  for  Supersonic  Aircraft 


These  technologies  are: 

a.  High- temperature  electronic  component  technology. 

b.  Thermal  packaging  technology. 

c.  Switching  circuit  design  technology. 


Semiconductor  Development  Status  -  Research  and  development  in 
high  temperature  components  and  in  high  temperature  packaging  techniques 
has  progressed  significantly  since  work  was  started  in  the  1960's  by 
NASA  for  application  to  spacecraft.  This  work  tapered  off  as  better 
cooling  systems  were  developed.  It  was  revived  in  the  1973-74  time 
period  for  well-logging  Instrumentation  during  the  energy  crisis.  This 
application  was  able  to  live  with  short-term  reliability  of  400  hours, 
thus  no  long-term  reliability  testing  was  required. 
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Research  into  semiconductor  components  involving  high  tempera¬ 
tures  Is  on-going  at  several  companies  and  government  organizations. 

These  activities  can  be  grouped  into  the  following  categories: 

a.  Those  being  developed  for  relatively  short-term  reliability 
as  for  geothermal  and  oil  drilling  applications. 

b.  High-temperature  testing  to  accelerate  failures  which  would 
occur  at  normal  temperatures,  as  is  done  by  Bell  Telephone 
Laboratories  and  others. 

c.  Those  which  are  being  conducted  under  government  sponsor¬ 
ship,  such  as  the  NAVAIR/NRL/GE  program  for  application  to 
engine  controls. 

The  discussion  following  will  concentrate  on  the  work  being 
done  under  the  NAVAIR/NRL  contract  to  General  Electric  since  that  pro¬ 
gram  is  concentrating  on  the  level  of  reliability  pertinent  to  flight 
control.  A  discussion  of  efforts  in  other  companies  is  included  to  show 
extensiveness  of  the  work  in  the  industry. 

NAVAIR/NRL/General  Electric  Prof  ram  -  The  General  Electric 
Company's  Electronic  Laboratory  in  Syracuse,  New  York,  is  under  contract 
to  the  Naval  Research  Laboratory,  Code  6810,  (Contract  N00173-79-C-0010) 
for  the  development  of  high-temperature  electronics  to  be  used  for 
engine  control  appl ications.  The  program  is  under  the  sponsorship  of 
the  Naval  Air  Systems  Comnand.  The  purpose  of  the  program  is  to  develop 
a  family  of  electronic  components  which  can  operate  at  300°C  for  10,ono 
hours.  This  translates  to  more  than  320,000  hours  at  200°C,  a  probable 
top  specification  for  flight  control. 

These  components  are  intended  for  engine  controls  mounted  on  an 
engine  in  an  uncontrolled,  high- temperature  environment.  This  presents 
the  same  technical  problem  as  mounting  electronics  at  or  on  a  flight- 
control  actuator.  The  functional  requirements  of  the  circuitry  are  also 
similar  to  the  flight-control  application. 
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The  desire  to  place  the  control  electronics  on  the  engine  is 
based  on  the  following: 

a.  Remotely  located  controls  generally  require  long  wire  runs 
which  result  in  unacceptable  high  vulnerability  and  low 
reliability  of  the  control  system. 

b.  Engine  controls  mounted  on  each  engine  assure  that  a  single 
failure  affecting  only  one  of  the  engine  controls  will  not 
propagate  to  other  engines. 

In  the  first  phase  of  the  program,  G.E.  Syracuse  concluded  thar 

2 

Integrated  Injection  Logic  (I  L)  was  the  best  technology  available  for 

2 

this  application.  I  L  is  a  bipolar,  large-scale  integration  circuit 
technology  shown  to  be  capable  of  operation  at  300°C.  The  results  of 
G.E.'s  testing  has  shown  that  the  major  reliability  problem  is  the 
metallization  migration  into  the  semiconductor  material  at  elevated  tem¬ 
peratures.  A  double  metallization  layer  is  needed  for  digital  applica¬ 
tions  at  300°C  operation,  and  the  system  chosen  is  platinum  silicide/ 

( i tanium-tungsten/gol d.  Platinum  silic.de  forms  stable  ohmic  contacts 
to  silicon,  and  gold  interfaces  easily  with  the  outside  world.  A  thick 
layer  of  titanium- tungsten  is  needed  to  separate  those  materials. 

Latter  phases  of  the  program  call  for  the  design,  development, 
and  testing  of  a  family  of  products,  including  a  microprocessor,  read¬ 
only-memory  (ROM),  random-access-memory  (RAM)  and  possibly,  a  digital  - 
to-analog  converter.  G.E.  is  predicting  availability  of  these  compo¬ 
nents,  operating  at  300°C,  in  the  1985-86  time  frame  and  almost 
immediate  availability  at  200°C. 

Othc*  High  Temperature  Electronics  -  Other  developments  in 
high- temperature  electronics  are  underway  in  government  and  commercial 
circles  -  mostly  for  the  geothermal  and  well-logging  industry.  Sandia 
Laboratories,  Harris  Semiconductor,  3urr-Brown,  and  Teledyne  Micro¬ 
electronics  all  report  activities  for  this  application.  MASA-Lewls  has 
announced  success  in  growing  cubic  silicon  carbine  (SIC)  single  crystal 
wafers  -  which  portends  to  be  the  breakthrough  for  obtaining  this 
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technology.  SIC  has  been  a  prime  candidate  for  many  years  for  use  in 
high- temperature  electronic  applications. 


Electronic  Packaging  for  High  Temperature  -  Some  research  in 
packaging  technology  was  done  in  the  197?  79  period  by  HR  Textron  Inc. 
using  existing  components.  Hybrid  techniques  were  employed  wherein 
semiconductor  chips  were  attached  to  the  package  substrate  with  eutec¬ 
tics,  reducing  the  thermal  path  impedance  between  the  microcircuit 
package  and  the  semiconductor  junction  from  approximately  90°C/watt  to 
10°/'watt.  This  work  has  also  been  done  by  the  G.E.  Company  at  their 
Evendale  Engine  Division  in  applications  related  to  the  FADEC  engine 
control  program. 


Circuit  Design  Approach  -  The  use  of  switching  techniques  in  a 
circuit  design  reduces  the  internal  power  dissipation  of  the  semicon¬ 
ductor  devices  employed.  Acting  as  saturated  switches,  these  devices 
operate  predominately  in  one  of  two  modes:  saturation  and  cutoff.  The 
devices  operate  for  only  small  periods  of  time  {switching  transition)  in 
the  active  regio;..  It  is  operation  in  the  active  region  which  generates 
the  most  significant  junction  self-heating.  A  design  approach  to  maxi¬ 
mize  the  use  of  switching  techniques  will  generate  less  junction  self¬ 
heating  than  its  linear  circuit  counterpart. 


The  significance  of  reducing  internal  power  dissipation  and 
self-generated  junction  heating  is  to  increase  the  ambient  temperature 
which  can  be  tolerated. 


Driving  a  conventional  electrohydraul ic  servovalve  with 
switching  circuits  ( i . e . ,  pulse-width  modulation)  is  not  a  new  concept. 
Expanding  this  design  approach  to  include  feedback  transducer  signal 
processing  and  command/feedback  summation  (loop  closure),  offers  a 
circuit  design  approach  for  servoactuation  control  with  potentially 
higher  thermal  environment  tolerance  than  conventional  linear  concepts. 
Seme  work  has  been  done  by  HR  Textron  Inc.  in  this  area,  with  good 
results. 


General  Electric's  Aircraft  Engine  Group  has  reported  using  a 
linear,  variable  phase  transducer  (LVPT)  In  their  system  design  as  a 
feedback  sensor.  This  device  can  measure  linear  displacement  by  excit¬ 
ing  two  primary  coils,  measuring  the  phase  difference  at  the  output  of 
the  secondary  by  "OR-ing"  the  output  with  the  phase  clock,  and  counting 
the  resultant  pulses.  The  resulting  system  is  digital  circuitry- 

p 

intensive  which  will  be  compatible  with  I  L  components. 
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F. 


DIGITAL  SERVO  ACTUATION  ELEMENTS 


The  digital  servo  actuation  elements  to  be  discussed  include 
the  servovalve,  the  actuator,  and  the  position/pressure  feedback 
devices. 


1.  Digital  Servovalves  -  The  digital  servovalve  candidates 

sel  'd  for  discussion  are: 

•  parallel -binary  servovalve 

•  pulse-width-modulation-driven,  conventional  EHSV 

e  stepper-motor-dri ven  servovalve 

Parallel  Binary  Servovalve  -  The  parallel  binary  servovalve- 
driven  actuator  is  discussed  in  Configuration  V  in  Section  IV.  The 
servovalve  in  this  configuration  is  a  parallel  wire,  binary  servovalve 
(figure  14)  which  was  designed,  built,  and  tested  under  United  States 
Air  Force  contract  AF33 ( 657 ) -8644 -  This  valve  had  an  8  bit  (8  coils) 
torque  motor.  While  there  is  no  technical  reason  for  this  servovalve 
not  to  match  the  performance  of  a  linear  servovalve,  its  complication  in 
manufacturing  and  the  multiplicity  of  wires  to  drive  it  do  not  reremmend 
i  t. 


Pulse-Width  Modulation  Standard  Linear  Servovalve  -  4  prefer¬ 
able  approach  is  to  use  pulse -width  modulation  (PWM)  techniques  with  a 
conventional  analog  electrohydraulic  servovalve  (EHSV). 

This  concept  allows  a  "digital"  type  of  transmission  to  the 
EHSV.  The  driver  could  be  a  voltage  driver  or  a  current  driver.  The 
shortcoming  of  a  voltage  driver  is  that  as  the  EHSV  coil  impedance 
changes  with  temperature,  the  resultant  coil  current  will  change.  This 
appears  as  an  effective  forward  path  gain  change  in  the  loop  closure 
path  of  the  servoactuator.  Corrections  to  this  can  be  made  by  current 
sensing  or  temperature  sensing. 
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Stepper-Motor-Driven  Servovalve  -  A  stepper  motor  could  be  used 
to  drive  a  servo  valve  spool.  Stepper  motors  accept  a  continuous  con¬ 
trol  pulse  train  and  Increment  a  predetermined  amount  of  rotation  for 
each  control  pulse  and,  therefore,  could  be  applied  to  an  actuation  de¬ 
vice.  It  easily  converts  digital  Information  to  exact  Incremental  rota¬ 
tion,  and  there  Is  no  need  for  any  feedback  device  such  as  a  tachometer 
(rate)  or  an  encoder  (position).  If  the  system  is  driven  open  loop,  the 
problems  of  feedback  loop  phase  shift  and  resultant  instability  common 
to  servo  drivers  are  eliminated. 

Proper  application  of  a  stepper  motor  requires  a  consideration 
of: 

•  Distance  to  be  traversed. 

•  Maximum  time  allowed  for  the  travel. 

•  Desired  static  (detent)  accuracy., 

c  Desired  dynamic  accuracy  to  return  to  static  accuracy 
(settling  time). 

•  Required  step  resolution  (combination  of  step  size  and 
gearing  to  the  load) . 

•  Total  system  friction,  system  inertia,  and  the  speed/torque 
characteristics  of  the  stepper  motor. 

A  stepper  motor  accelerates  and  decelerates  with  each  control 
pulse  even  when  it  is  rotating  at  a  maximum  speed  which  causes  a  veloc¬ 
ity  change  on  its  output  shaft  rotation  at  all  operating  speeds.  Thus  a 
stepper  motor  would  be  unsuitable  for  constant  velocity  application. 

Stepper  motors  are  extremely  sensitive  to  power  supply  voltages 
and  internal  motor  heating  caused  by  cc  nuous  operation  at  high 
speeds.  These  conditions  can  be  improved  by  series  and  suppression 
resistances  that  limit  steady-state  current  to  motor  windings  and  con¬ 
trol  the  damping  effects  of  the  suppression  diodes  connected  across  the 
motor  windings. 
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Calculation  and/or  measurement  of  Inertial  or  friction  loads 
connected  to  the  motor  Is  necessary  since  In  an  open  loop  stepper  motor 
system,  the  motor  does  not  "know"  If  excessive  Inertial  or  friction  has 
caused  the  motor  to  gain  or  lose  one  or  more  steps.  If  any  steps  are 
randomly  lost  or  gained,  the  positional  accuracy  Is  lost.  However,  a 
minor  loop  may  be  closed  around  the  stepper  motor  with  an  encoder  for 
system  performance  enhancement.  The  most  significant  Improvement  from 
such  *1  arrangement  would  be  in  the  positional  accuracy.  The  motor 
woulc  now  "know"  that  It  has  reached  a  commanded  posl tl ■  r  . 

A  stepper  motor  must  be  coupled  to  the  load  by  some  means  which 
does  not  contribute  backlash  in  excess  of  that  necessary  to  meet  system 
specifications.  Timing  belts  and  precision  lead  screws  fit  this 
description. 

Open  motor  enclosure  may  eject  flame  in  the  event  of  an  insula¬ 
tion  or  component  failure.  Totally  enclosed  motors  will  prevent  such 
flame  hazards  but  make  the  cooling  of  the  motor  extremely  difficult. 

2.  Digital  Actuator  -  For  purposes  of  this  study,  a  digital 

actuator  is  defined  as  one  in  which  the  electrical  signal  input  to  the 
valving  is  a  digital  actuator  position  command  rather  than  an  actuator 
rate  command.  Measuring  the  actuator  position  is,  therefore,  unneces¬ 
sary.  It  may  be  desirable  to  monitor  the  ram  position  for  failure 
detection  and/or  for  initializing  Its  position. 

Within  the  above  definition  two  basic  concepts  are  evident.  In 
concept  1,  the  valving  element  is  the  digital-to-analog  converter.  The 
valving  element  has  a  mechanical  summing  point  for  the  digital  command 
and  the  actuator  position,  with  the  difference,  or  error  signal,  deter¬ 
mining  valve  opening  (actuator  rate).  For  this  concept,  the  actuator 
and  mechanical  feedback  are  analog,  but  with  the  valving  element  as  a 
summing  point  the  combination  satisfies  the  above  digital  actu  or 
definition. 
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In  concept  2,  the  actuator  Is  constructed  from  a  number  of 
series-connected  pistons  with  binary  related  strokes.  For  this  concept, 
each  piston  has  its  own  valving. 

Concept  1  -  Two  approaches  that  satisfy  concept  1  will  be 
described  briefly.  The  first  approach  involves  using  a  servovalve  with 
binary  digital  or  with  pul se-width-modulated  (PWM)  Input  to  the  torque 
motor  coils  and  with  mechanical  feedback  (torque)  to  the  torque  motor 
armature  (see  figure  15).  The  binary  digital  servovalve  could,  for 
example,  have  multiple  coils  on  a  single  armature  with  a  binary  rela¬ 
tionship  between  the  number  of  turns  in  the  various  coils.  The  PWM 
approach  has  considerable  advantage  and  would  be  a  logical  choice 
between  the  two.  Note  that  the  problem  of  actuator  null  shift  inherent 
in  using  the  torque  motor  as  a  summing  point  for  mechanical  feedback  has 
not  been  avoided  by  this  approach. 

This  concept  has  the  servovalve  as  its  D/A  conversion  element 
and  the  mechanical  loop  closure  is  analog.  Since  this  type  incorporates 
mechanical  feedback,  a  whole  new  grou-i  of  considerations  different  from 


Figure  15.  Binary  Digital  Servovalve 


i 
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those  In  the  baseline  configuration  are  introduced.  It  would,  there¬ 
fore,  be  very  difficult  to  make  valid  comparisons.  This  is  not  to  say 
that  mechanical  feedback  does  not  have  merit  in  some  applications. 

The  second  approach  to  concept  1  is  one  in  which  a  stepper 
motor  produces  a  stepped  input  that  is  summed  with  a  rotation  propor¬ 
tional  to  actuator  displacement  by  means  of  a  mechanical  differential . 
The  output  of  the  differential  displaces  a  valve  spool  that  controls 
flow  to  the  actuator  (see  figure  16).  In  this  figure  the  spline  and 
screw  work  together  to  form  a  differential.  This  approach  has  the 
disadvantage  of  requiring  Initialization  with  some  type  of  position 
sensor  since  the  output  does  not  have  an  address.  In  fact,  it  may 
require  periodic  or  continual  position  updating  because  of  the  pos¬ 
sibility  of  lost  steps. 


HYDRAULIC 

VALVE  SPOOL  ROTATION  PROPORTIONAL 


Figure  16.  Stepper  Motor  Input 

Concept  2  -  Concept  ?.  consists  of  a  series  of  actuator  pistons 
connected  end  to  end  and  having  a  binary  relation  between  strokes  of  the 
different  pistons  (see  figure  17).  The  stroke  of  the  shortest  piston  is 
equal  to  the  resolution  required,  and  the  total  output  is  twice  the 
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stroke  of  the  longest  piston  minus  the  stroke  of  the  shortest  piston. 
Thus,  five  pistons  stacked  in  series  give  resolution  of  3.2%  of  total 
stroke.  Separate  on-off  valving  is  required  for  each  piston.  If  back 
and  forth  hunting  is  to  be  avoided  upon  the  introduction  of  commands 
that  require  extending  the  long-stroke  piston  and  retracting  several  of 
the  shorter  stroke  pistons,  the  valve  flows  must  be  carefully  controlled 
to  assure  equal  traverse  time  of  all  pistons  under  all  pressures,  at  all 
operating  loads,  and  in  both  directions.  This  is  not  an  easy  task  and 
could  dictate  substantial  overdesign  in  load-carrying  capability  to 
negate  the  effect  of  load.  The  electrical  command  is  parallel  binary, 
and  since  digital  signals  will  almost  surely  be  sent  to  the  location  of 
the  actuator  as  serial  information  (because  of  the  number  of  wires 
required  for  paralleled  transmission),  actuator  mounted  electronics  to 
dc  the  conversion  would  be  a  near  necessity.  Note  also  that  there  are  a 
large  number  of  sliding  seals.  This  basic  type  is  inherently  very  heavy 
and  complex  mechanically,  which  alone  would  remove  it  from  contention 
for  most,  if  not  all,  aerospace  applications.  A  positive  feature  is  the 
elimination  of  many  sources  of  null  drift.  This  approach  exemplifies 
the  difficulties  incurred  from  mechanical  dfgital-to  analog  conversion 
at  high  power  levels. 

3.  Digital  Transducer  -  A  study  of  existing  "digital"  transducers 

to  provide  position  and  pressure  feedback  has  indicated  that  the  mech¬ 
anisms  are  based  on  optics,  with  pattern-reading  principles  applied  to 
translate  linear  motion  to  digital  electronic  signals. 

The  optical /digital  transducers  rely  on  their  mechanical  align¬ 
ment,  but  also  on  their  true  mechanical  movement  linearly.  Some,  be¬ 
cause  the  digital  scale  is  not  referenced  to  zero,  require  initiali¬ 
zation.  The  optical  connectors  and  optical  system  used  require  space 
and  alignment  which  to  date  has  not  yielded  the  same  degree  of  compact¬ 
ness  as  existing  devices. 

The  present  position  transducer  ( LVDT)  relies  on  the  accuracy 
of  coil  winding  and  the  mechanical  precision  of  the  armature  to  the 
stator.  It's  scale  fc.Jtor  can  be  compensated  for  by  means  of  the 
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electronics  which  excites  and  demodulates  it,  as  long  as  its  mechanics 
are  linear  throughout.  It  can  be  made  small  for  servo  valve  spool 
monitoring,  or  large  to  monitor  long  actuator  strokes.  It  can  withstand 
the  actuator  environment. 

Perhaps  the  biggest  deficiency  of  the  present  LVDT  is  in  the 
number  of  Interconnections  between  it  and  its  excitation  and  demodulat¬ 
ing  electronics  in  the  servo  processor,  and  the  wire  weight  required 
when  the  servo  processor  is  located  in  the  avionics  bay.  This  objection 
can  be  ameliorated  when  the  servo  processor  is  located  at  the  actuator. 
In  addition,  digital  excitation  and  demodulation  techniques  have  been 
developed  to  effectively  "digitize"  the  existing  LVDT  devices. 
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G. 


DIGITAL  CONTROL  PROCESSOR  SAMPLING  RATE 


A  design  Issue,  first  observed  In  Configuration  I,  was  the 
effect  of  the  waveform  emanating  from  the  digital  control  processor  on 
the  electrohydraul ic  servovalve.  As  this  discussion  will  show,  these 
effects  were  countered  by  the  use  of  notch  filter  tuned  to  the  sampling 
frequency.  However,  the' notch  filter  Introduced  a  gain  change  and  phase 
lag  which  were  a  strong  function  of  the  sampling  rate  selected. 

In  any  configuration  where  a  digital  control  processor  feeds 
digital  commands  to  an  analog  servo  processor,  the  signal  will  be  of  a 
staircase  waveform,  with  steps  at  the  command  sampling  rate  of  the 
computer.  The  rate  selected  for  evaluation  was  100  Hz  (command  update 
every  0.01  seconds).  The  effect  of  this  waveform  on  the  actuation 
device  was  evaluated  using  a  ramp  command. 

Figure  18  shows  the  response  of  the  second  stage  of  the 
servovalve  ano  the  ram  to  a  digitized  ramp  command.  The  command 
consists  of  a  series  of  small  amplitude  steps. 

These  steps  are  so  smal1  that  their  effect  on  ram  position  is 
insignificant.  However,  the  servovalve  spool  is  almost  constantly  In 
motion  at  this  frequency,  and  such  a  condition  may  cause  undue  wear  and 
fatigue  of  the  servovalve  spool  and  of  the  hydraulic  lines,  producing 
premature  failure.  However,  tests  of  a  pulse-width  modulation  drive  on 
a  direct-drive  actuator,  a  system  with  similar  oscillation-producing 
effects  on  the  valve  spool,  produced  no  variations  in  wear  of  the  spool 
bands  from  that  of  a  sine-wave  driven  spool  at  the  same  frequency  over  a 
300-hour  life  test.  This  latter  was  reported  by  Dynamic  Controls  Inc. 
in  connection  with  Air  Force  Contract  F33615-75-C-3068. 

The  transfer  function  characteristics  of  the  servoampl ifler, 
servovalve,  ~ctuator,  LYDT,  and  demodulator  all  contribute  to  the 
effect.  The  digital  command  signal  is  held  constant  for  one  sample 
period,  but  the  linear  feedback  signal  continues  to  change.  Therefore, 
the  resultant  error  summation  is  correct  only  at  the  instant  of  command 
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update,  developing  a  sawtool  waveform.  The  error  waveform  as  shown  In 
figure  19  will  pulse  the  servovalve  at  the  system  digital  sample  rate. 


The  use  of  a  notch  filter  to  alleviate  this  problem  is 
discussed  below.  However,  another  solution  is  to  sum  the  feedback  and 
command  signals  in  a  digital  format,  either  by  converting  the  analog 
feedback  signal  or  employing  a  digital  feedback  transducer.  The  digital 
summation  results  in  an  error  signal  waveform  as  depicted  in  figure  20. 

The  addition  of  a  notch  filter  in  the  ccmmand  path  to  suppress 
the  sampling  frequency  has  the  transfer  function: 

e.  <.2  2 

——  »  — n— ~  9  7  where  u>  ■  2jr  100 
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Its  frequency  response  is  displayed  in  figure  21. 


Tne  effect  of  tin's  filter  for  a  ramp  command  is  shewn  in  fig¬ 
ure  22,  which  indicates  that  the  filter  is  effective  in  reducing  the 
servo  valve  spool  response  to  the  sampling  frequenry.  The  ram  position 
is  the  same  as  before. 


Since  data  bus  capacity  is  directly  related  to  frequency,  a 
study  was  made  for  two  other  sampling  rates  (40  and  10  Hz). 

In  examining  the  effects  of  the  unfiltered  10  Hz  sampling  rate 
on  the  servovalve  spool,  it  was  noted  that  the  servovalve  opened  and 
closed  at  a  rapid  rate,  which  could  cause  the  following  problems  in  a 
hydraulic  system: ^ 


^This  condition  existed  at  all 
investigated. 


sampling  rate  frequencies 


IGNAL  VOLTS 
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Figure  22.  Effects  of  100  Hz  Sample  Rate  Input  With  Notch  Filter 


-  Induce  pressure  transients  i r.  the  hydraulic  components  and 
transmission  lines,  causing  potential  fatigue  problems  and 
affecting  the  overall  performance  of  the  complete  system. 

-  Create  interaction  between  the  lines  and  associated 
components. 

-  Limit  power  transmission  of  the  fluid  lines. 

-  Induce  oscillations  in  hydraulic  components. 

An  extensive  analysis  is  required  to  evaluate  all  of  the  above 
problems,  but  in  order  to  examine  one  of  the  potential  problems,  a 
fifteen-foot  supply  line  was  added  to  the  servoactuator  nonlinear 
dynamic  model.  A  nonlinear  distributed  parameter  analysis  was  conducted 
on  the  line  while  the  servoactuator  was  being  subjected  to  a  10  Hz  sam¬ 
ple  rate  (no  filter).  The  effects  of  the  10  Hz  sample  rate  on  the 
supply  line  are  shown  in  figures  23  and  24.  The  figures  show  that  the 
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supply  pressure  at  the  servovalve  drops  down  to  1800  psi,  peaks  up  to 

3700  psi,  and  oscillates;  the  flow  surges  to  105  cubic  inches  per 

second.  It  should  be  noted  that  the  pressure  and  flow  performance  has 

(2) 

the  period  of  the  10  Hz  sample  rate.  This  is  an  undesirable 
characteristic,  and  if  the  analysis  were  expanded  to  include  the 
complete  aircraft  hydraulic  actuation  system,  the  problem  would  be  more 
pronounced. 

A  detailed  evaluation  of  the  10  Hz  and  40  Hz  sampling  rate 
problem  is  containei  in  Appendix  D.  A  study  of  notch  filters  is  made, 
and  the  results  using  these  ana  compensated  notch  filters  is  displayed 
in  figure  25,  showing  acceptable  performance  at  40  H2  and  unsatisfactory 
performance  at  10  Hz. 


0  1  *00 
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Figure  25.  Large  Signal  Frequency  Response  10  and  40  H2  Sampling  Rate 


(2)20  Hz  at  null . 
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SECTION  IV 

detail  configuration  mechanizations 


In  Section  II  the  elements  and  six  configurations  were  defined. 
In  Section  III  the  design  Issues  derived  from  these  configurations  are 
discussed. 

This  section  will  describe  the  six  configurations  In  detail  in 

terms  of: 

•  Physical  Location  of  Elements 

•  Power  Supply 

•  Interconnections 

•  Triplex  Channel  Mechanization 

•  Servo  Processor  Mechanization 
t  Design  Trade-Offs. 
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A.  BASELINE  SYSTEM 

The  general  block  diagram  of  the  baseline  triplex  actuator 
system  is  shown  in  figure  26.  The  system  is  analog  fly-by-wire,  with 
three  analog  computers  controlling  triplex  servo  actuators.  The  redun¬ 
dancy  management,  failure  detection,  and  loop  closure  computations  take 
place  in  the  servo  processor  (element  C).  Details  of  the  active-on-line 
concept  are  described  in  Section  III,  "Redundancy  Architecture." 

1.  Physical  Location  of  Elements  -  The  flight  control  computer 
complex  consists  of  three  enclosures,  (one  for  each  channel)  within  the 
avionics  bay,  a  temperature-controlled  environment.  Each  enclosure 
contains  a  pair  of  analog  control  (law)  processors  and  all  the  servo 
processors  for  surface  control . 

2.  Power  Supply  -  The  electrical  power  supply  system  fo**  each  en¬ 
closure  (channel)  is  organized  into  two  separate  sections  -  one  to  power 


Figure  26.  Block  Diagram  Baseline  Multiactuator  System 
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one  control  processor  and  the  driver  sections  of  each  servo  processor 
and  the  other  to  power  the  monitoring  section  of  the  control  processor 
and  the  modeling-monitoring  sections  of  the  servo  processors. 

3.  Interconnections  -  Connections  between  the  control  processors 

and  the  servo  processors  are  made  by  means  of  a  motherboard.  There  are 
approximately  10  per  servo  processor,  or  120  within  each  enclosure  for 
an  aircraft  with  12  controlled  surfaces.  Connections  between  the  servo 
processors  and  each  actuator  complex  are  49  in  number  or  5R8  for  12 
controlled  surfaces. 


4.  Triplex  Channel  Mechanization  -  Figure  27  shows  the  triplex 

channel  mechanization  for  one  actuator.  Control  processor  (A,  A',  etc.) 
Is  that  part  of  each  computer  complex  which  generates  the  specific 
command  to  the  actuator-associated  servo  processor  circuitry.  Reset 
logic  is  In  place  for  use  in  Initial  reset,  and  for  retry  after  a 
detected  fault  condition,  if  this  mode  is  required  as  part  of  the 
cockpi  u-con troll eu  rcduriudficy  management  concept* 
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Figure  27.  Block  Diagram  Baseline  Triplex  Channels 
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if  the  difference  between  the  model  output  and  the  actual  EHSV 
position  is  greater  In  magnitude  than  a  preset  level,  a  fault  signal  is 
sent  to  the  "and"  circuit,  which  in  turn  drives  a  "latch."  If  the 
"latch"  is  driven  to  a  fault  state,  the  "Channel  Fail"  output  will 
change  state  to  tell  the  other  serve  processor  channels  that  this  chan¬ 
nel  Is  in  a  fault  condition.  The  latch  also  will  deactivate  the  bypass 
"driver"  circuit,  which  will  bypass  the  ram  and  remove  hydraulic 
pressure  from  the  servovalve.  The  "and"  circuit  may  a1 so  be  activated 
by  the  "Channel  Power  Supply  Fail"  signal  or  by  a  fault  detected  by  the 
LVPT  monitor. 

All  of  the  failure  detection  circuits  used  in  the  driver  side 
of  the  servo  processor  are  duplicated  in  the  monitor  side  of  the  servo 
processor.  Inputs  and  outputs  are  also  duplicated.  Only  one  of  the 
bypass  solenoid  coil  drivers  is  required  to  operate  for  a  bypass  of  the 
related  actuator.  A  detected  failure  in  either  side,  driver  or  monitor, 
can  bypass  the  actuator  and  set  the  next  in-line  servo  processor  to 
active  operation.  Therefore,  a  "good  state  failure"  of  the  failure 
circuitry  in  one  side  of  a  servo  processor  will  still  allow  detection  of 
operational  failures  in  the  servo  processor  channel. 

On-Line  Channel  Servo  Processors  -  If  the  servo  processor  is.  an 
"or.-line"  rather  than  a  normally  "active"  unit,  AP  circuits  and  redun¬ 
dancy  management  switching  (shown  as  dotted  lines  and  boxes)  are  added 
to  the  unit.  Curing  "on-line"  operation,  the  AP  signal,  conditioned  by 
the  "lag/limit"  circuits,  is  also  summed  with  the  command  and  ram  posi¬ 
tion.  This  allows  the  "on-line"  actuator  to  be  statically  passive  bu+ 
to  dynamically  share  the  load. 

If  a  "Ch.  AP  Fail"  signal  is  received  from  the  servo  processor 
reconfiguration  logic,  the  AP  signal  is  removed  from  all  summations  and 
the  "on-line"  servo  processor  will  function  like  the  normally  "active" 
servo  processor  described  in  the  previous  paragraph. 
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Conriand  Comparison  Monitoring  -  This  was  not  required  with  this 
configuration.  The  dual  monitors  in  the  servo  processor  provide  fault 
detection  of  the  separately  generated  position  commands.  Discrepancies 
between  the  command  channels,  Ch  and  Ch'  will  fall  the  model -EHSV  com¬ 
parison  and  bypass  the  actuator. 

Dual  versus  Single  Failure  Detection  in  the  Servo  Processor  - 
If,  in  the  failure  detection  circuitry  of  the  servo  processor,  a  func¬ 
tion  or  component  fails  to  the  “good"  output  state,  it  is  possible  to 
have  an  undetected  operational  failure.  Duplicating  failure  detection 
circuits  allows  detection  of  operational  failures.  Also,  some  command 
monitoring  circuits  are  saved  due  to  the  overlap  of  functions. 

Dual  Bypass  Coil  Drivers  -  Since  the  bypass  of  an  actuator  must 
be  very  reliable  for  fail-safe  operation,  dual  drivers  were  used  in  all 
servo  processors.  High  reliability  bypass  valves  in  the  on-line  uni+s 
are  necessary  since  they  may  become  an  active  channel  during  some  fau1 t 
conditions. 


B. 


CONFIGURATION  I  -  "DIGITAL  CONTROL  PROCESSOR 


This  configuration  deals  with  a  control  processor  feeding  a 
digital  command  signal  into  an  analog  servo  processor,  which  inputs  in 
turn  to  an  electrohydraul 1c  servo  valve. 

The  command  signal  is  a  12-bit  digital  word  transmitted  once 
during  every  sampling  period.  To  minimize  the  effects  of  this  staircase 
shaped  signal,  a  notch  filter  was  added  to  the  ser  o  processor.  Without 
the  notch  filter  this  signal  would  cause  the  servovalve  spool  to  be  al¬ 
most  in  constant  motion,  resulting  in  undue  fatigue  of  hydraulic  system 
components.  This  design  issue  is  discussed  in  Section  III,  "Digital' 
Control  Processor  Sampling  Rate," 

This  configuration  is  represented  in  figure  29.  It  is  the  same 
as  the  baseline  except  that  dual  digital  processors  replace  the  analog 
control  processors  in  each  of  the  three  channels.  This  necessitates  the 
addition  of  digital-to-analog  (D/A)  converters  and  notch  filters  in  the 
analog  servo  processors,  which  arc  otherwise  similar  to  the  baseline. 

D/A  conversion,  loop  closure,  failure  detection,  and  redundancy  manage¬ 
ment  are  accomplished  in  the  servo  processors  as  in  the  baseline. 

1 .  Physical  Location  of  Elements 

As  with  the  baseline,  all  servo  processors  associateo  with  one 
channel  (A,  B  or  C)  are  physically  located  with  their  control  processor 
pairs,  within  an  enclosure,  and  each  of  the  three  enclosures  is  dis¬ 
persed  within  the  avionics  bay. 

2.  Power  Supply 

As  in  Configuration  I,  the  power  supply  for  each  enclosure 
(channel)  is  organized  into  two  sections. 

3 .  Interconnections 

Communl cat ions  between  the  control  processor  and  its  associated 
servo  processors  are  by  means  of  two  digital  parallel  b  ises,  both  common 
to  all  servo  processors  within  the  specific  channel  enclosure.  The 
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Figure  29.  Block  Diagram  Configuration  I  Multiactuator  System 

buses  operate  in  a  broadcast  format.  Servo  processor  fail  status  is 
communicated  to  the  other  two  servo  processors  for  that  surface  via 
discrete  wires.  Connections  between  servo  processors  and  actuators  are 
aircraft  group  A  and  identical  to  the  baseline. 

4.  Triplex  Channel  Mechanization 

Figure  30  shows  the  system  for  one  triplex  actuator.  The  servo 
processor  acts  as  a  monitor  of  each  control  processor  bus  as  well  as  for 
the  Integrity  of  the  control  processor  pair.  Each  of  the  monitor  out¬ 
puts  is  logically  "anded"  with  one  of  the  dual  outputs  of  the  power 
supply  monitors,  then  sent  via  2  discrete  wires  to  all  servo  processors 
in  the  enclosure.  These  two  status  signals  are  also  sent  to  the  other 
two  control  processor  enclosures  for  redundancy  management  purposes. 
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Figure  30.  Block  0iagrar»  Configuration  I  Triplex  Actuator  System 


5 •  Servo  Processor  Mechanisation 

Figure  31  shows  the  detailed  block  diagram  of  a  servo  processor 
channel.  Dotted  connecting  lines  and  boxes  show  the  reconfiguration  and 
AP  functions  that  are  not  used  in  any  normally  "active"  servo  processor 
channels  but  are  used  in  all  "on-line"  servo  processor  channels.  Solid 
lines  and  boxes  show  circuits  that  are  identical  in  all  servo  proces¬ 
sors.  Servo  processor  functions  include  D/A  conversion,  servo  loop  clo¬ 
sure,  servo  loop  failure  detection,  and  servo  processor  redundancy 
management. 

Each  servo  processor  has  added  functions  for  control  processor 
interface:  two  D/A's,  two  registers,  two  command  filters  and  two  sets 
of  bus  interface  logic  to  interface  with  the  parallel  buses  from  the 
control  processors. 

The  analog  implementation  of  the  servo  loop  closure,  failure 
detection,  and  active/on-1 ine  operation  of  the  servo  processor  are 
unchanged  from  baseline  operation. 
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6. 


Design  Trade-offs 


Analog  Servo  Processor  Functions  versus  Digital  Implementa- 
ti on  -  The  complexity  of  the  servo  processor  when  implemented  in  analog 
is  less  than  in  digital.  The  complexity  added  to  each  servo  processor 
by  parallel  bus  interface  is  minimal.  Complexity  for  a  serial  bus 
interface  is  greater,  as  will  be  seen  In  Configuration  II. 

Parallel  versus  Serial  Control  Processor  Buses  -  Since  the 
control  processor/servo  processor  data  link  is  all  within  the  same  en¬ 
closure,  the  parallel  bus.  structure  requires  the  least  hardware  to 
implement  and  is  the  least  complex  interface. 
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c. 


CONFIGURATION  II  -  “SERIAL  DATA  BUS 


This  system  Is  functionally  the  same  as  Configuration  I  except 
that  a  serial  bus  is  used  to  communicate  between  the  control  processor 
and  its  servo  processors  (figure  32). 

1 .  Physical  Location  of  Elements 

The  servo  processors  are  now  remote  from  their  corresponding 
control  processor  and  are  housed  together  (by  channel)  In  three  separate 
enclosures  in  a  separate,  temperature-control  1 ed  bay.  Thp  control  pro¬ 
cessor  pairs  are  located  in  three  dispersed  enclosures  in  the  avionics 
bay. 


2.  Power  Supply 

Each  servo  processor  enclosure  now  has  its  own  power  supply 
which  is  common  to  all  servo  processors  within  the  enclosure. 


Figure  32.  Block  Diagram  Configuration  II  Mul tiactuator  System 


3. 


Interconnections 


The  control  processor/servo  processor  link  is  now  a  serial  bus 
between  control  processor-servo  processor  enclosures.  Parallel  bus  data 
distrioutlon  is  used  within  servo  processor  enclosures.  Connections 
(group  A)  from  servo  processors  to  actuator  are  the  same  as  in  the  base¬ 
line  and  Configuration  I,  although  shorter  due  to  the  servo  processor 
locations. 

4.  Mechanization  within  the  Servo  Processor  Enclosures 

Figure  33  is  a  block  diagram  of  the  serial  bus  interface  and 
powdr  supply  within  each  servo  processor  enclosure.  All  serial  bus 
interfaces  and  parallel  data  bus  control  is  implemented  only  once  in 
each  servo  processor  enclosure.  Two  "All  channnel  fail"  lines  represent 
the  fail  status  of  functions  common  to  all  servo  processors  within 
the  enclosure  (i.e.,  control  processor  pair,  enclosure,  power  supply,  or 
serial  bus).  These  two  lines  are  inputs  to  all  servo  processors  within 
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Figure  33.  Block  Diagram  Configuration  II  SP  Enclosure  Serial  Bus 

Interface  and  Power  Supply 
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the  enclosure,  and  a  fault  signal  on  either  line  will  disable  all  servo 
processors  within  the  enclosure. 

5.  Servo  Processor  Mechanization 

Figure  34  Is  the  block  diagram  of  a  servo  processor  in 
Configuration  II.  The  dotted  lines  and  boxes  show  functions  that  are 
added  for  normally  "on-line"  servo  processors  (same  as  Configuration  I). 
The  parallel  data  bus  control  interface  and  dedicated  status  lines  used 
in  this  configuration  are  all  functionally  Identical  to  the  servo  pro¬ 
cessor  interface  lines  in  Configuration  I. 

6.  Design  Trade-Offs 

Control  Processor/Servo  Processor  Serial  Bus  -  When  the  control 
processor  and  servo  processor  are  in  separate  enclosures,  bus  timing, 
connector  size  and  least  number  of  interface  wires  all  favor  using  a 
serial  bus  as  the  control  processor/servo  processor  data  link 

To  assess  the  applicability  of  the  MIL-STD-1553B  serial  bus, 
the  following  assumptions  were  made. 

•  All  servo  processors  require  100  Kz  update. 

•  Data  words  are  20  bit  length. 

•  Servo  processor  address  imbedded  in  the  servo  processor 
command  data  word. 

c  All  servo  processor  input  commands  ere  sent  in  one  trans¬ 
mission  that  is  preceded  by  a  control  processor  status  word. 

•  After  each  update,  two  data  words  are  sent  to  the  control 
processor  and  contain  the  status  of  all  servo  processors. 

•  70%  serial  bus  utilization  is  assumed  for  nonfail  operation. 

•  The  servo  processor  enclosure  contain  12  servo  processors. 

•  The  serial  bus  is  functionally  dedicated  to  servo  processor 
interface. 
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Configuration  II  -  Bus  Utilization^  -  Transmissions  per  sam¬ 
ple  data  period  required  for  Configuration  II,  assuming  that  redundancy 
management  and  loop  closure  are  performed  in  the  servo  processor,  are  as 
follows: 


Transmissions 
1  (CP  — SP)  of: 

1  (SP  —  CP)  of: 

2 


Data  Words 

I  -  CP  fail  status 
12  -  position  commands 

_2  -  SP  fail  status 
15 


Using  equation  1  shows: 

%  Bus  Utilization  «  ( 2 x:L 08 1 y 20-)  x  100  =  S% 

Since  only  one  update  cycle  is  required,  the  bus  has  14  times 
the  capacity  required  (70%  being  the  upper  limit). 

A  calculation  was  made  to  evaluate  the  data  bus  load  if  a  func¬ 
tion,  such  as  redundancy  management,  were  performed  in  the  control  pro¬ 
cessor  instead  of  in  the  servo  processor.  This  would  require  sending 
all  required  data  to  the  control  processor. 

Since  a  given  transmission  is  limited  to  32  words,  the  redun¬ 
dancy  management  data  words  are  split  up  into  four  separate 
transmi ssions. 

Transmi ssi on 
1  (CP  —  SP)  of: 


Data  Words 
1  -  CP  fail -status 
12  -  position  commands 


^Developed  in  Section  III 
Application" 


"Serial  Data  Bus,  Format,  Protocol  and 
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Transmission  (Contd) 
4  (SP— —  CP)  of: 


5 

Using  equation  (1)  shows: 

*  Bus  Utilization  =  (5x^^1^20)-  x  100  -  34% 

This  calculation  shows  that  the  data  bus  would  accommodate  this 
data  traffic.  However,  this  illustration  bears  out  the  benefits  of 
proper  functional  distribution  as  discussed  in  Section  II  under  "Func¬ 
tional  Partitioning"  since  data  bus  utilization  Has  increased  from  5%  to 
34%.  For  Configuration  II  the  MIL-STD-15533  serial  data  bus  is  an  over¬ 
kill  in  terms  of  capacity  and  hardware  cost. 

Parallel  Data  Distribution  Within  the  Servo  Processor 
End osures  -  The  addition  of  a  parallel  bus  and  control  logic  make  it 
possible  to  utilize  only  one  serial-  parallel  translation  circuit  for 
all  servo  processors.  Weight,  cost  and  power  system,  complexity  favor 
this  approach. 

Servo  Processor  Fail  Status  to  Control  Processor;  Serial  Data 
Bus  versus  Discrete  Dedicated  Wires  -  To  use  the  bus  for  this  function 
requires  a  serial  bus  bidirectional  remote  terminal  (RT).  This  involves 
very  little  more  circuitry  at  the  remote  terminal  than  a  receive-only 
RT.  It  also  requires  the  addition  of  control  logic  and  registers  to 
process  the  status  of  all  servo  processors  in  one  circuit  per  enclosure. 
This  approach  was  superior  to  the  extra  wire,  connector  pins,  and  line 
drivers  required  In  each  servo  processor  of  the  enclosure. 

Analog  versus  Digital  Servo  Processor  Mechanization  -  Since  the 
serial  bus  Interface  was  required  only  once,  the  servo  processor  mech¬ 
anization  s-ill  favors  an  analog  approach. 


Data  Words  (Contd) 
32  -  (4x8)  redundancy 
mgmt,  inputs 


13+(32x4)  -  141 
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D. 


CONFIGURATION  III  -  "ACTUATOR  INTEGRATED  SERVO  PROCESSOR 


1 .  Physical  Location  of  Elements 

The  servo  processors  are  now  located  at  the  actuator  itself 
(figure  35).  It  should  also  be  noted  that  contrary  to  Configurations  I 
and  II,  where  the  servo  processors  were  collected  in  three  groups  of  12 
(for  12  surfaces),  they  a*e  now  collected  in  12  groups  of  three.  For 
the  purposes  of  this  study,  the  mechanization  of  the  servo  processors 
will  be  similar  to  Configurations  I  and  II,  employ  analog  techniques  for 
servo  loop  closure,  redundancy  management  modeling,  etc. 

2 .  Power  Supply 

Each  servo  processor  will  also  have  its  own  dedicated  power 
sufply  and  monitors.  Here  again  the  functions  are  unchanged,  but  a 
power  supply  is  required  for  each  servo  processor  rather  than  one  for 
all  servo  processors  of  a  particular  channel. 

3 .  Interconnections 

The  actuator/servo  processor  multiwire  interface  is  now  very- 
short.  The  control  processo^/servo  processor  serial  bus  is  now 
distributed  to  all  actuator  locations.  All  data  exchanged  between  servo 
processors  and  control  processors  is  by  meaiis  of  the  serial  digital 
buses.  Serve  processor  fail  status  is  sti1'1  exchanged  by  means  of 
dedicated  wires  between  'ervo  processor  channels  with  each  servo 
processor  having  its  own  reconfiguration  logic. 

4 .  Servo  Processor  -  Bus  Interface  Mechanization 

Figure  36  shows  the  block  diagram  of  the  serial  bus  Interface 
resident  in  each  servo  processor.  The  serial  bus  is  bi di recti ona! .  The 
fail  status  of  each  side  of  the  servo  processor  is  transmitted  bad  to 
the  control  processor.  This  interface  differs  from  Configuration  II  in 
that  each  servo  processor  must  have  a  dedicated  bus  interface.  The 
functions  of  the  bus  interface  have  now  been  slightly  reduced.  The 
"word  decode  and  control"  function  now  has  only  the  input  for  one  servo 


Figure  35.  Block  Diagram  Configuration  III  Multiactuator  System 


processor  to  control,  rather  than  all  servo  processors  of  the  same 
channel . 


With  Configuration  III  the  economy  of  common  bus  transceivers 
and  power  supplies  has  been  lost.  However,  the  possibility  of  some 
single  point  failures,  which  could  disable  one-third  of  all  the  actuator 
channels,  has  also  been  eliminated. 


Figure  36.  Block  Diagram  Configuration  III  Serial  Bus  Interface 


5.  Servo  Processor  Mechanization 

Figure  37  shows  the  :ervo  processor  mechanization  of  Configura 
tion  III.  The  analog  implementation  of  the  servo  functions  remain  un¬ 
changed  from  Conf iguration  II.  The  dotted  lines  and  blocks  show  func¬ 
tions  that  are  only  Implemented  in  normally  "on-line"  servo  processors. 

6.  Design  Trade-offs 

Dedicated  Bus  Interface  and  Power  Supply  for  Each  Servo 
Processor  -  If  all  control  processor  commands  were  transmitted  via  the 
same  bus.  any  bus  failure  would  totally  disable  the  actuator  -  an 
unacceptable  single  point  failure.  Each  servo  processor  channel  of  an 
actuator  must  Interface  with  a  different  control  processor.  Therefore, 
even  though  all  three  channels  are  in  close  proximity,  each  servo 
processor  must  have  its  own  bus  interface  with  a  physically  different 


serial  bus. 


The  same  case  may  be  made  for  dedicated  power  supplies  to  each 
servo  processor.  Anyone  power  supply  failure  will  not  disable  the 
actuator,  only  one  of  three  channels  of  that  actuator. 

Control  Prccessor/Servo  Processor  Serial  Bus  Choices  -  A 
transformer-coupled  serial  bus  that  cannot  be  disabled  by  failure  of  one 
of  its  remote  terminals  is  part  of  the  MIL-STD-15S38  specification. 

Under  15538  specifications  there  must  also  be  a  bus  controller.  In 
Configura-tion  III  there  would  be  two  choices  for  the  bus  controller: 

•  Each  control  processor  pair  could  be  a  bus  controller.  This 
would  have  an  undesirable  effect  or  the  control  processor's 
task  to  accomplish  nonservo-processor-related  tasks.  It 
also  decreases  the  number  of  data  words  available  on  each 
transmission. 

•  An  autonomous  bus  controller  could  be  utilized  that  treats 
both  the  control  processor  pair  and  each  servo  processor  as 
a  remote  terminal.  This  increases  trie  bus  overhead 

si ightly. 

Trade-offs  will  involv  effects  on  redundancy  management  and 
the  time  required  to  process  the  bus  traffic.  For  the  purposes  of  this 
study,  the  second  option  is  assumed.  However,  the  bus  controller  is 
physically  integrated  with  the  control  processor. 

One  of  the  advantages  of  a  "functionally  complete"  servo 
processor  is  that  very  little  data  exchange  is  required  between  it  and 
the  control  processor  pair  for  actuator  control. 

Remote  Location  Environments  -  The  servo  processor  of 
Configuration  III  will  be  remotely  mounted  in  locations  where  space  is 
limited.  This  will  require  special  high  temperature  components  and  the 
use  of  hybrid  microelectronic  packaging  techniques.  Th  transmitter, 
receiver,  and  MIL-ST0-1553B  protocol  functions,  when  implemented  with 
hybrid  technology  and  screened  to  MIL-STD-8833,  have  costs  approaching 
$1000  per  bus  interface  unit. 
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A  trade-off  should  be  made  between  hardware  and  bus  protocol. 
That,  along  with  the  Integration  of  the  terminal  with  the  servo 
processor,  should  provide  a  lower  cost  product. 

(41 

Configuration  III  Bus  Utilization  -  Transmissions  per  sample 
data  period,  assuming  that  redundancy  management  and  loop  closure  are 
performed  in  the  servo  processors,  are  as  follows: 


Transmission 


Data  Words 


12  (CP  — —  SP)  of: 


1  -  CP  fail  status 
1  -  position  command 


12  (SP  — —  CP)  of: 
24 


JL.  -  SP  fail  status 
3  x  12  =  36 


However,  there  are  now  12  servo  processors  to  be  dealt  with 
separately,  calling  for  24  transmissions  per  sample  data  period. 

Using  equation  (1)  shows: 


%  Bus  Utilization 


(24x108)  +  (36  x  20) 

rorouo 


100  =  33% 


If  it  were  now  intended  to  perform  redundancy  management  in  the 
control  processor. 

Transmi ssions  Data  Words 

SP)  of:  1  -  CP  fail  status 

1  -  position  command 

CP)  of:  1  -  SP  fail  status 

8  -  redundancy  mgmt  inputs 
11  x  12  *  132 


(4) 


12  (CP  — - 
12  ( SP  — ■- 
24 


Developed  in  Section  III  "Serial  Data  Bus 


Using  equation  (1)  shows: 


%  Bus  Utilization 


(24x108)  +  (132x20) 

rsTfiuc 


x  100  -  52% 


The  bus  can  handle  this  traffic.  This  example  illustrates  the 
strong  effect  of  the  overhead  protocol  of  the  MIL-STD-1553B  bus  capacity 
when  a  high  number  of  transmissions  are  required,  since  adding  the  re¬ 
dundancy  management  data  words  had  less  effect  than  in  Configuration  II. 


7.  Reliability  -  High  Temperature  Effects 

For  purposes  of  this  study,  no  reliability  degradation  due  to 
environmental  effects  upon  the  circuit  components  is  assumed  in  Config¬ 
uration  III.  This,  of  course,  neglects  the  high- temperature  environment 
of  the  actuator  as  is  discussed  in  Section  III,  "High  Temperature  Elec¬ 
tronics."  There,  the  discussion  developed  the  need  for  three  techniques 
and  technologies  (i)  switching  circuit  techniques  to  drive  the  servo¬ 


valve  and  to  excite  and  demodulate  the  LVOT's; 


2)  application  of  high- 
temperature  semiconductor  devices  capable  of  meeting  this  environment; 
and  (3)  use  of  special  micro-electronic  packaging  techniques  to  effi¬ 
ciently  dissipate  the  internal  heat  generated  by  the  semiconductor 
devices. 
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E. 


CONFIGURATION  IV  -  “SERVO  PROCESSOR  VOTING  PLANE 


This  configuration  demonstrates  an  approach  to  retaining  high 
reliability  of  tne  actuation  system  when  the  reliability  of  the  servo 
processor  may  be  degraded  because  of  the  high- temperature  environment  of 
the  actuator. 

This  is  accomplished  by  employing  a  microprocesor  pair  in  the 
servo  processor  units  and  connecting  all  serial  buses  to  each  servo 
processor,  thus  creating  a  voting  plane  at  the  servo  processor/actuator 
location. 


1 .  Physical  Location  of  Elements 

The  three  servo  processors  associated  with  each  actuator  are 
grouped  at  that  actuator  location. 

2.  Power  Supply 

As  in  Configuration  III,  each  servo  processor  has  its  own 
dedicated  power  supply. 

3.  Interconnections 

Control  processors  are  now  linked  to  all  servo  processors  via 
three  serial  buses.  Interconnections  between  servo  processors  and  their 
actuator  complexes  are  by  means  of  short  wire  interconnects. 

4.  Triplex  Channel  Mechanization 

Figure  38  shows  the  block  diagram  of  Configuration  IV  as  a 
mul tiactuator  system.  As  may  be  seen,  all  servo  processors  have  access 
to  the  serial  buses  of  all  control  processors.  This  creates  a  system 
which  allows  full  system  performance  with  any  control  processor  pair  and 
any  actuator  servo  processor.  In  previous  configurations,  for  an 
actuator  to  be  operational,  the  control  processor  and  servo  processor  In 
the  same  channel  (A,  B,  or  C)  had  to  be  operational. 


79 


CONTROL  servo  actuators 


actuator  s  have 

digital  SERVOVALVE 
digital  position  & 

Ap  SENSORS 

Figure  38.  Block  Diagram  Confi guration  IV  Mul ti actuator  System 

Since  each  servo  processor  now  is  connected  to  all  control 
processor/servo  processor  buses,  the  failure  status  of  servo  processors 
for  channel  reconfiguration  purposes  is  now  provided  via  the  buses, 
rather  than  by  means  of  dedicated  wires  between  servo  processor  chan¬ 
nels.  As  in  previous  configurations,  the  servo-processor-to-actuator 
link  Is  by  means  of  short  wire  interconnects. 

5.  Serial  Bus  Interface 

Figure  39  shows  a  block  diagram  of  each  servo  processor's 
Interface  to  the  serial  buses.  The  receiver  front  each  bus  feeds 


dual -buffered  serial -to-parallei  converters  and  dual -word  detectors,  a 
set  for  each  Internal  microprocessor  bus.  Each  word  detector  drives  its 
associated  interrupt  controller  and  each  serial-t.o-parallel  converter 
feeds  Its  associated  internal  bus  through  a  buffered  register.  A  trans¬ 
mitter  for  each  serial  bus  is  supplied  from  both  Internal  buses  with 
data.  The  transmitter  control  arbitrates  access  to  the  transmitter. 

Each  servo  processor  In  Configuration  IV  now  receives  the  con¬ 
trol  processor  commands  and  the  status  for  all  three  actuator  channels. 
The  mid  value  of  the  three  commands  is  used  as  the  position  input  com¬ 
mand  for  the  actuator  servo  loop  closure.  Each  servo  processor's  fail 
status  is  transmitted  at  each  update  cycle  to  each  control  processor. 
This  status  transmission  is  monitored  by  the  other  servo  processor  chan¬ 
nels  of  the  actuator  to  Implement  reconfiguration  In  the  event  of  a 
servo  processor  failure. 

6 .  Servo  Processor 

Figure  40  shows  a  block  diagram  of  a  servo  processor  mechani¬ 
zation  in  Configuration  IV.  The  oscillator  for  LVDT  excitation,  ampli¬ 
fier  for  servo  loop  closure,  and  all  LVDT  demodulation  and  monitoring 
are  still  accomplished  with  analog  circuitry.  Functions  that  are  under 
program  control  of  the  servo  processor  microprocessor  (uP)  are: 

•  Control  processor  command  and  status  storage 

a  Other  servo  processor's  status  storage 

o  Command  voting  and  determi nation  of  servo  command  to  be  used 

•  Failure  detection  within  the  servo  processor 

•  Configuration  management  (active  on-line  operation  in 
channels  where  applicable) 

•  Servo  modeling  and  comparison  to  actual  electrohydraullc 
servovalve  (CHSV) 

•  Control  o  transmission  and  reception  of  all  serial  bus 
information 
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•  Controlling  the  bypass  driver  of  the  servo  processor 

•  Monitoring  all  serial  buses  for  a  bus  failure 

•  All  decisions  involving  a  logical  operation 


All  analog  values  of  the  ram,  EHSV,  and  AP  LVDT's  (in  normally 
on-line  servo  processor)  are  multiplexed  into  one  analog-to-digital  con¬ 
verter  and  fed  into  the  pP.  The  discrete  outputs  of  the  LVOT  monitors 
are  combined  in  a  buffer  register  and  also  fed  into  the  yP.  With  this 
information,  and  the  last  command  output  from  the  yP  known,  the  EHSV 
model  may  be  implemented  and  the  results  compared  to  the  actually  sensed 
EHSV  position  in  the  yP.  The  yP  program  then  decides  the  status  to  be 
sent  to  its  "driver"  register,  in  light  of  the  (1)  model  comparison,  (?) 
serial  bus  fail  status,  and  (3)  power  supply  fall  status. 

7 .  Design  Tradeoffs 

Use  of  yP‘s  in  the  Servo  Processors  -  In  previous  configura¬ 
tions,  the  tasks  were  simple  enough  that  a  yP's  extra  complexity  and 
cost  could  not  be  justified.  However,  the  added  interface  capability 
required  in  Configuration  IV,  coupled  with  the  requirement  of  command 
input  voting  at  each  servo  processor,  translated  the  required  functions 
to  a  domain  which  would  favor  use  of  yP' s  over  analog  circuits  since 
much  of  the  added  requirement  was  either  logical  or  mathematical. 

Dual  versus  Single  yP  in  Each  Servo  Processor  -  The  concept  of 
a  circuit  not  being  able  to  detect  faults  within  Itself,  hence  the  need 
for  parallel  functions  for  comparison  and  fault  detection,  is  applicable 
to  Configuration  IV.  Even  though  the  command  output  that  will  be  com¬ 
puted  In  yP-2  Is  not  used  to  position  the  servo  loop,  all  of  the  monitor 
functions  should  compare  with  yP-l's  control.  If  a  discrepancy  exists 
between  yP-1  -2,  either  has  the  capability  to  bypass  the  actuator 
channel  and  transmit  the  servo  processor  fall  status  back  on  the  control 
processor  serial  bus. 
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f  K) 

Configuration  IV  Bus  Utilization  -  Transmissions  per  sample 
data  period  for  one  bus  are  as  follows: 


Transmission 

12  (CP  broadcast  to 
each  surface's  SP's) 


12  ($P"A“  broadcast  to 
CP  A  and  to  all  SP's) 

12  (SP"8"  broadcast  to 
all  SP's) 

12  (CPl'C"  broadcast  to 
_  CP  C  and  to  all  SP'S) 
48 


Data  Words 

1  -  reset 

1  -  position  command 
1  -  CP  fall  status 

1  -  SP"A"  fall  status 

1  -  SP"BH  fall  status 

1  -  SP“C“  fail  status 

(6  x  12)  -  72 


Using  equation  (1) 


%  Bus  Utilization 


(48  x  108)  +  (72  x  20) 

- mrjjoui - 


x  100  *  66% 


This  shows  that  the  bus  has  the  capacity.  However,  it  should 
be  noted  that  this  is  only  possible  because  the  "broadcast"  mode  of 
MIL-STD-1553B  is  employed.  What  is  sacrificed  is  the  verification  that 
transmission  have  been  received. 


There  was  no  need  to  consider  redundancy  management  at  the 
control  processor  in  view  of  the  use  of  microprocessors  In  the  servo 
processors. 


(5) 


Developed  in  Section  III 


"Serial  Data  Bus" 


3S 


Analog  versus  pP  Functions  -  Since  each  servo  processor  must 
communicate  with  three  serial  buses,  and  delay  times  on  the  serial  buses 
should  be  relatively  small,  separate  word  detection  circuits  were  used 
to  interrupt-dri ve  the  pP's,  rather  than  have  word  detectors  under  pro¬ 
gram  control . 

Reception  and  storage  of  the  three  control  processor's  commands 
and  statuses,  mathematical  comparison  of  control  processor  commands,  and 
logical  operations  on  status  inputs  and  on  control  of  binary  data  flow 
to  and  from  the  serial  bus  interface  are  all  operations  that  favor  a  pP. 
Because  of  the  large  amount  of  data  storage,  comparison,  and  voting,  a 
pP  is  very  well  suited  for  this  application  in  Configuration  IV.  Here 
the  program  control  and  storage  capability  of  a  yP  is  a  more  effective 
mechanization  than  performing  the  same  functions  with  logic  elements  and 
analog  circuitry. 

The  LVDT  oscillator,  servo  loop  closure,  demodulation  of  the 
LVDT  secondaries,  and  monitoring  the  LVDT  secondaries  are  still 
basically  analog  functions.  Accomplishing  these  functions  in  the  pP 
would  require  a  much  more  complex  pP  program  with  significantly  higher 
operation  speed.  The  added  design  difficulty  and  minor,  if  any,  parts 
count  improvement  favors  leaving  these  functions  to  be  done  w'th  analoa 
circuitry. 

Multiplexed  Analog- to-Digital  (A/D)  Converters  versus 
Dedicated  -  Since  any  incorrect  data  from  the  A/D  Converters  into  the  pP 
will  set  conditions  to  disable  the  servo  processor  channel,  the  fewer 
parts  in  the  A/D  "feedback"  the  more  reliable,  assuming  approximate 
equality  of  MTBF  of  the  parts.  Dedicated  A/D's  would  require  three 
A/D’s  while  using  the  multiplexer  would  require  only  two  integrated 
circuits. 
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F.  CONFIGURATION  V  -  "ALL  DIGITAL  SYSTEM" 

This  configuration  is  included  to  study  the  use  of  a  digital 
servovalve  and  digital  transducers.  Except  for  the  actuator  (ram)  the 
system  is  totally  digital.  The  servo  valve  in  this  configuration  is  a 
parallel  wire,  binary  servovaive  (figure  41)  which  was  designed,  built 
and  tested  under  United  States  Air  Force  contract  AF33(657)-8644.  This 
valve  had  an  8-bit  (8  coils)  torque  motor.  For  the  purpose  of  this 
study  a  12-bit  torque  motor  Is  assumed.  Also,  the  binary  servovalve  is 
assumed  to  have  the  same  performance  as  the  jet  pipe  servovalve  used  on 
the  baseline  actuation  device. 

It  should  be  noted  that  neither  the  12-bit  digital  servovalve 
or  the  digital  encoder  is  qualified  for  flight.  Presently  both  only 
exist  as  laboratory  units.  These  elements  are  discussed  in  Section  III, 
"Digital  Actuation  Elements." 

This  configuration ,  like  Configuration  IV,  uses  microprocessors 
in  the  servo  processor  unit  as  a  voting  plane  to  enhariep  thp  reliability 
of  the  system.  This  consideration  may  be  required  if  "high  temperature 
electronics"  cannot  achieve  the  required  high  degree  of  reliability 
requ i red. 


The  mul tiactuator  block  diagram  is  shown  in  figure  42.  Each 
channel  of  the  actuation  devices  (element  E)  consists  of  a  12-bit 
digital  servovalve;  sel f-mori toring  digital  encoders  for  servovalve 
spool  position,  ram  position  and  the  transducer;  a  solenoid  bypass 
valve;  and  a  ram. 

The  control  processors  send  control  surface  commands  to  the 
servo  processor  and  monitor  the  servo  processor  failure  status.  Loop 
closure,  loop  gain,  redundancy  management,  failure  detection,  and  input 
conmand  voting  computations  are  accomplished  in  the  servo  processor 
microprocessors. 
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/  TORQUE  MOTOR 
y  ARMATURE 


Figure  41.  Parallel  Binary  Servo  Actuator,  Multicoil  Torque 

Motor  Schematic 

1 •  Physical  Location  of  Elements 

Servo  processors  are  mounted  on  or  near  their  resDective 

actuators,  as  in  Configuration  III,  The  servo  processor  environment  is 
uncontrolled. 

2 .  Power  Supply 

As  in  Configuration  III  and  IV,  each  servo  processor  has  its 
own  dedicated  power  supply. 

3 .  Interconnections 

Interconnection  between  the  servo  processors  and  actuator 
elements  are  short  wire  interconnects.  The  number  of  connections  is 
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Figure  42.  Block  Diagram  Configuration  V  Mtil tiactuator  System 


significant  because  the  actuator  devices  are  parallel-digital,  requiring 
a  connection  per  bit. 


4 .  Servo-Processor  Mechanization 

Serial  bus  interface  (figure  43)  shows  a  block  diagram  of  the 
control  processor  serial  bus  interface  in  the  servo  processor.  Each 
serial  bus  has  one  transmitter  and  one  receiver.  Each  yp  bus  has  a 
dedicated  sorial-to-parallel  converter  and  word  detector  that  is  fed 
from  the  common  serial  bus  receiver.  Both  buses  access  the 


parallel-to-serial  converter  and  transmitter  control.  The  transmitter 
control  arbitrates  availability  of  the  parallel-to-serial  converter  to 
the  uP  parallel  buses.  The  word-decode  of  each  serial  bus  interrupt- 
drives  its  respective  to  receive  either  commands  or  data  from  the 

serial  bus. 

The  Microprocessors  and  Actuator  Interface  -  Figure  44  shows  a 
block  diagram  of  the  dual  AP's  and  actuator  channel  interface  in  each 
servo  processor.  Dotted  lines  and  boxes  show  functions  and  circuits 
that  are  only  utilized  in  normally  "on-line"  servo  processors. 

All  three  servo  processors  of  an  actuator  will  receive  the 
position  command  and  control  procesor  status  from  all  control  processor 
pairs.  Each  servo  processor  shall  send  its  failure  status  to  all  three 
control  processors.  The  normally  "active"  servo  processors  monitor  the 
status  transmission  of  the  other  two  servo  processors  of  the  same 
actuator.  This  servo  processor  status  information  exchange  enables  the 
"on-line"  servo  processors  (two  per  triplex  set)  to  reconfigure  them¬ 
selves  in  the  event,  an  "active"  servo  processor  fails,  without  added 
serial  data  transmissions. 

During  each  command  update  frame,  three  position  and  three 
control  processor  statuses  are  sent  tc  each  triplex  servo  processor  set. 
Each  servo  processor  of  the  set  compares  the  three  commands  ar,d  picks  a 
medium  value.  This  value  will  be  the  position  command  for  the  update 
frame.  The  present  ram  position  is  then  subtracted  from  the  position 
command. 


Once  the  loop  closure  computation  is  accomplished,  the  digital 
error  (loop  gain  computation)  is  amplified  and  sent  to  a  12-bit  regis¬ 
ter.  Each  register  location  is  connected  to  a  switch,  which  is  turned 
on  and  off  by  a  1  or  0  bit  signal.  If  a  switch  is  turned  on,  current  is 
passed  to  its  coil.  Hence,  the  connections  between  the  servo  processor 
and  the  actuation  device  are  parallel,  hard  wires. 


If  the  setup  Input  to  each  coil  creates  digital  noise  to  which 
the  servovalve  spool  responds,  twelve  filters  must  be  added  to  the 
Interface  electronics,  or  the  microprocessor' s  sample  rate  must  be 
increased  to  minimize  this  effect. 
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Figure  44.  Block  Diagram  Configuration  V  SP  Microprocessors  and 

Interface  to- Actuators 


SECTION  V 

CONFIGURATION  COMPARISONS 


Comparisons  were  made  for  performance  and  physical 
characteristics  of  the  baseline  and  five  configurations.  Figure  45 
"Configuration  vs.  Element  Design"  Is  repeated  from  Section  II  for 
reference. 
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i  liliU  IJUIAUJ  controlled 
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•GROUP  A  WIRING  1$  AlRCRAPT 
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Figure  45.  Configuration  Vs.  Element  Feature 
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A.  FUNCTIONAL  PERFORMANCE  COMPARISON 

Performance  characterl sties  of  the  baseline  and  four  of  the 
five  developed  configurations  were  evaluated  using  an  HR  Textron  non¬ 
linear  analysis  computer  program  (Aopendix  C).  The  results  are  tabu¬ 
lated  in  table  1,  with  frequency  response  comparisons  displayed  in 
figures  46  and  47.  Configuration  V  was  not  evaluated  because  the 
hardware  was  not  developed. 

Basel ine  -  The  baseline  all-analog  system  characteristics 
listed  Indicate  that  all  specification  requirements  are  met.  Baseline 
characteristics  are  detailed  In  Appendix  B. 

Configuration  I  -  This  actuation  system  is  Functionally  similar 
to  the  baseline  scheme.  The  only  performance  differences  observed  were 
a  slight  Increase  in  positional  error  and  a  minor  degradation  in  fre¬ 
quency  response  due  to  the  addition  of  a  notch  filter  and  the  digital - 
to-analog  converters. 

Configuration  II  vs.  I  -  No  change  in  performance  was  noted. 

TABLE  1.  FUNCTIONAL  PERFORMANCE 


CONFIGURATIONS 

FILTER 
REQUIRED 
AT  IOO  Hi 
SAMPLING 
RATE 

frequency 

RESPONSE 

(Hi) 

STEP 

RESPONSE- 

OVERSHOOT 

1%) 

FAILURE 

TRANSIENTS 

(%) 

POSITIONAL 

ERROR 

AT  75°F 

1%) 

BASELINE 

NO 

lO 

NONE 

9.0 

32 

CONFIGURATION  1 

YES 

9 

NONE 

9.0 

.35 

CONFIGURATION  11 

YES 

9 

NONE 

9.0 

35 

CONFIGURATION  IN 

YES 

9 

NONE 

9.0 

35 

CONFIGURATION  IV 

YES 

10 

5% 

10.9 

35 

_ 

CONFIGURATION  V 

NO 

NOT  EVALUATED 

9i 


AMPlITUOC  RATIO  '  D6 


Configuration  III  vs.  I  -  A  performance  analysis  at  elevated 
temperatures  (250°F)  was  conducted  on  Configuration  III  electronics.  A 
slight  degradation  in  frequency  response  was  observed  when  the  perfor¬ 
mance  of  the  electronics  was  derated  for  operation  at  250°F  (figure  481. 
However,  at  75°F,  no  degradation  overall  of  Configuration  III  was  noted. 


1  1  10  100 

FREQUENCE  -  M t 


Figure  48.  Configuration  III,  Small  Signal  Frequency  Response 

Configuration  IV  vs.  I  -  Configuration  IV  $  microprocessor  in 
the  servo  processor  added  an  additional  sampling  delay  in  the  control 
loop  to  that  of  the  digital  control  processor.  However,  its  sampling 
rate  can  be  set  independently  from  that  of  the  control  processor.  All 
performance  specifications  were  essentially  identical  for  the  inner 
loop,  except  for  small  overshoot  in  step  response.  Evaluation  of  the 
outer  loop  was  not  included  in  the  study. 

Configuration  V  vs.  I  -  In  this  configuration,  the  actuator 
control  loop  was  commanded  by  a  staircase,  or  discontinuous  function,  as 
with  Configuration  I,  but  in  this  case  the  position  feedback  was  of  a 
similar  characteristic.  A  time-history  plot  of  a  ramp  input  is  shown  in 
figure  49.  It  was  not  necessary  to  add  the  notch  f i  1  te*~  since  the 
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Figure  49.  Effects  of  100  Hz  Sample  Rate  on  Unfiltered  Ramp  Input 

sampling  rate  of  the  position  transducers  were  synchronized  with  that  of 
the  command  signal.  With  the  mechanization  studied,  an  increase  in 
frequency  response  was  attributed  to  the  way  in  which  feedback  from  the 
transducer  was  implemented.  However,  a  slight  overshoot  in  step  re¬ 
sponse  and  failure  transients  was  also  observed.  The  interaction  of 
discontinuous  command  feedback  signals  has  effects  which  required  fur¬ 
ther  study. 
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8. 


PHYSICAL  COMPARISONS 


Estimates  or  factors  affected  by  the  physical  design  are 
presented  in  table  2.  Detailed  analyses  of  the  baseline  is  presented  in 
Appendix  8,  It  should  be  noted  that  this  analysis  does  not  include  the 
control  processor.  However,  the  control  processor's  functions  may  be 
signi ficantly  reduced  as  servo  processor  functions  increase. 

Configuration  I  vs.  Baseline-  Notch  filters  and  digital -to- 
analog  converters  were  added  to  the  servo  processors.  Dual  oarallel 
buses  were  exchanged  for  motherboard  interwiring.  This  increased  the 
component  count  of  the  servo  processor  by  an  estimated  9%,  however, 
because  of  digital  implementation  of  the  control  processor,  the  overall 
complex  of  control  processors  and  servo  processors  represents  a  distinct 
improvement  in  total  component  count,  reliability,  flexibility,  and 
capability. 

Conf iguration  II  vs.  I  -  No  change  was  required  functionally. 
There  is  a  10%  increase  in  componen.  count  in  the  sprvo  processor  due  to 
conversion  from  a  dual  parallel  bus  Structure  in  Configuration  I  to  a 
MIL-STD-1553B  serial  data  bus  in  II.  This  component  count  increase  is 
the  reason  for  the  similar  small  increases  in  cost,  weight,  and 


TABLE  2.  .ERVQACTUATOR  SYSTEM  PHYSICAL  CHARACTERISTIC  SUMMARY 

PER  ACTUATOR 


CHARACTERISTIC 

BASELINE 

CONF.  1 

CONF.  II 

CONF  III 

CONF  'V 

COMPONENT  COUNT (%) 

100 

109 

119 

186 

205 

SERVO  PROCESSOR 

1CK 

10.5K 

12K 

36  K 

48K 

COST  (SI 

SYSTEM 

44  K 

45K 

46  K 

70K 

02  K 

SERVO  PROCESSOR 

WEIGHT 

WIRES  ANC  BUSES 

493 

496 

505 

225 

230 

Cb>) 

SYSTEM 

1093 

1096 

1105 

825 

830 

SERVO  PROCESSOR 

50X10-6 

65X1  o'6 

SOX  1 0^ 

125X1  O'6 

O67X10"6 

RELIABILITY 

1.50X1  O'9 

SYSTEM 

l  39X10’9 

1.41X1G”9 

1.72X10"9 

1  34X1  O'9 

P  /WER  <VAJ 

693 

7’3 

772 

794 

1030 

decrease  In  reliability.  Depending  on  the  location  of  the  servo 
processors,  a  significant  weight  reduction  is  possible  by  virtue  of 
serial  bus  substitution  for  aircraft  group  A  wiring. 

Configuration  III  vs.  II  -  No  change  is  required  functionally. 
There  is  a  56%  increase  in  component  count  over  Configuration  II.  This 
increase  is  due  to  three  factors  which  come  into  play  when  servo  pro¬ 
cessors  are  grouped  by  12  groups  of  three  (Configuration  III)  rather 
than  three  groups  of  12  (Configuration  II).  Configuration  III  requires 
a  power  supply  and  a  MIL-STD-1553B  serial  bus  interface  unit  for  each 
servo  processor.  (In  Configuration  II,  one  power  supply  was  required 
for  12  servo  processors  and  a  dual  parallel  bus  fed  the  servo  processors 
from  one  serial  bus  interface.)  In  addition  it  was  assumed  that  linear 
components  capable  of  meeting  actuator-location  temperatures  were  avail¬ 
able,  but  at  premium  prices.  Costs  therefore  increased  by  52%  overall, 
but  weight  decreased  by  25%  overall,  due  principally  to  the  substitution 
of  serial  data  bases  for  45  aircraft  group  A  wires  per  surface,  or  5RR 
total . 


It  should  be  recognized,  however,  that  Configuration  III  would 
actually  be  designed  and  produced  in  hybrid  microelectronic  technology 
wherein  component  count  and  reliability  would  be  calculated  based  on 
MIL-HD3K-217C  for  hybrid  microelectronic  circuits  -  a  significant 
improvement  in  reliability. 

Configuration  IV  vs.  Ill  -  Component  count  increased  by  10% 

(including  dual  microprocessors)  due  to  the  introduction  of  a  voting 

plane  in  the  servo  processors  located  at  the  actuator.  The  effect,  was 

to  increase  overall  channel  costs  by  17%  (86%  over  baseline).  However, 

-9 

a  significant  increase  in  reliability  was  achieved  from  1.72  x  10  for 
Configuration  III  to  1.34  x  10'^  for  IV. 

Configuration  V  -  Configuration  V  is  an  all-digital 
configuration.  Forward  loo?  digital-to-analog  conversion  takes  place  in 
the  flux-summing  of  the  binary  digital  servovalve  torque  motor. 
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Analog-to-aigital  conversion  in  the  position  feedback  loop  takes  place 
in  the  linear  motion-to-binary  readout  of  the  encoder.  Its  feasibility 
is  based  on  the  development  of  a  digital  encoder  and  a  digital  valve. 

The  feasibility  of  this  development  is  not  functional  but  rather 
physical  and  economic. 

Size,  weight,  and  cost  factors  dictate  digital-to-analog  or 
analog-to-digital  conversions  at  the  lowest  possible  power  and  simplest 
mechanical  levels.  Thus,  Configuration  V  is  not  expected  to  be  competi¬ 
tive  with  configurations  which  perform  these  conversions  electronically 
and  by  flux  summing,  respectively.  (See  Section  III,  "Digital  Mechani¬ 
zation  of  Servoactuator  Elements.) 
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SECTION  VI 

OVERALL  FINDINGS  AND  CONCLUSIONS 


In  Section  III  the  design  issues  were  discussed  in  detail. 

This  was  followed  by  a  detailed  description  of  the  con  igurations  in 
Section  IV  and  their  comparisons  in  Section  V.  This  section  will 
describe  the  findings  of  these  sections  in  terms  of  both  the  issues  and 
the  configurations.  Recommended  configurations  for  today ‘s  technology 
and  for  future  technology  are  provided  under  conclusions. 

A.  FINDINGS 

Performance  -  All  configurations  (I-V)  were  theoretically  able 
tc  match  the  performance  requirements  of  the  baseline.  All  physical 
components  were  not,  however,  readily  available.  Thus,  some  failed  to 
meet  physical,  cost,  and  multiple  source  requirements. 

Redundancy  Architecture  -  The  active-on-line  system  analyzed  in 
these  configurations  lends  itself  to  a  concept  of  in-line  failure  detec¬ 
tion  throughout.  Distributed  servo  processors  are  able  to  effectively 
monitor  the  failure  status  of  the  control  processor,  the  interconnecting 
data  bus,  and  the  serveactuator  complex.  Failure  and  reconfiguration 
communications  between  channels  can  be  readily  handled  between  servo 
processors  by  dedicated  wires  when  they  are  located  at  the  actuator 
(Configuration  III),  but  become  a  tradeoff  between  that  approach  and 
using  the  data  bus  between  control  processors,  in  Configuration  II. 

Configuration  IV  provides  an  insight  which  is  important  to 
cross-channel  monitoring  systems  (e.g.,  forcesharing) .  This  is  a  voting 
or  switching  plane  at  the  actuator,  employing  microprocessor  chips  in 
the  servo  processors.  This  feature,  while  increasing  component  count  by 
10%  over  Configuration  III,  improved  system  reliability  over  Configura¬ 
tion  III  by  22%.  It  also  has  an  advantage  in  reducing  the  vulnerability 
of  the  bus  distribution  system  to  battle  damage.  However,  it  has  a 
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disadvantage  In  complicating  the  in-line  failure  detection  logic  of  the 
active -on-line  concept. 

This  study  of  conf iguratior.s  suggests  that  in  overall  flight 
control  system  redundancy  architecture  design,  the  integrated  servo 
processor-actuator  should  be  the  future  optimal  point  for  actuation 
system  failure  monitoring. 

Functional  Distribution  -  Computational  load  in  the  control 
processor  and  simplified  data  bus  interfaces  between  the  control  pro¬ 
cessor  and  servo  processors  are  the  two  factors  to  be  considered  in 
deciding  on  where  to  perform  the  loop  closure,  failure  detection,  and 
redundancy  management  functions.  By  these  rules,  all  these  functions 
should  be  performed  in  the  servo  processor. 

Physical  Distribution  -  Physically  it  was  noted  that  the  most 

* 

significant  difference  in  the  actuation  configurations  appeared  in 
Configuration  III  where  weight  (for  one  channel  of  three  serve  proces¬ 
sors  plus  actuator)  decreased  by  25",  due  principally  to  reduction  in 
aircraft  group  A  wiring. 

Other  factors  which  favor  Configuration  III  are  its  potential 
for  providing  interference-free  signals  to  the  actuators  as  well  as 
providing  a  "smart  actuator."  This  concept,  by  providing  the  actuator 
with  a  "functional  completeness,"  yields  a  simpler  interface.  This,  in 
turn,  provides: 

•  Simpler  fault  isolation  to  an  actuator  LRU 

e  Simple  procurement  specifications 

•  Potential  for  standardization 

•  A  trade  of  588  aircraft  wires  for  a  serial  data  bus  system  - 
an  aircraft  weight  savings  estimated  at  450  lb 
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Reduction  of  servo  loop  noise 


•  Improved  dispersement  and  simplification  for  battle  damage 
avoidance  and  repair 

•  A  potential  for  long-term  improved  performance  at  lower  cost 
through  a  multidiscipl inary  technology  (electronic- 
hydraulic-mechanical )  approach  to  the  actuation  function. 

nata  Rus  Format,  Protocol,  and  Application  -  The  MTL-$Tn-l553R 
serial  data  bus  was  able  to  handle  all  channel  traffic  between  the  12 
servo  processors  and  their  control  processor  pairs.  When  all  functions 
of  loop  closure,  failure  detection,  and  redundancy  management  are  per¬ 
formed  in  the  servo  processor,  MIL-STn-l553R  is  a  distinct  overkill  in 
terms  of  complexity  and  cost. 

For  distributed  control  loop  applications  requiring  high 
iteration  rates  (100  Hz)  the  MIL-STD-1553B  is  not  recommended  for  the 
following  reasons: 

•  Protocol  is  data  word-limited  due  to  its  high  overhead- 
to-data-word  ratio  of  approximately  1  to  1  for  control  loop 
appl ications. 

•  Hardware  is  too  complex  for  the  limited  space  available  at 
the  actuator  and  cannot  withstand  the  high  temperature 
environment. 

High-Temperature  Electronics  -  This  technology  involves  three 
developments  all  of  which  are  now  available: 

2  g 

•  I  L  semiconductor  technology  capable  of  10  system  failure 

rates  at  200°C. 
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a  High  temperature  packaging,  employing  eutectically  mounted 
semiconductor  chips  In  a  hybrid  microelectronics  packaging 
concept. 

•  Digital  switching  circuit  design  concepts  to  avoid  internal 
heat  generation. 

The  availability  of  high-temperature  electronics  completes  the 
process  initiated  by  the  microprocessor  (functional  distribution!,  and 
the  digital  serial  data  bus  (physical  distribution),  allowing  the 
development  of  the  smart  actuator. 

Digital  Servoactuation  Elements  -  In  Configuration  V,  digital 
electrohydraul ic  valves  driving  analog  actuators  were  considered.  A 
parallel  binary  servovalve  driven  by  a  microprocessor  register  through 
current  drivers  involves  extensive  parallel  wiring  if  digital  transducer 
encoders  are  also  employed.  A  preferred  approach  is  pulsewidth  modula¬ 
tion  of  electrohydraul ic  servovalves,  providing  performance  equivalent 
to  the  baseline  system.  This  approach  can  be  coupled  with  the  use  of 
similar  digital  circuit  techniques  to  excite  and  demodulate  flux- summing 
LVDT's.  Employing  newly  developed  high-temperature  electronics  to  allow 
locating  the  servo  processor  circuits  at  the  actuator  offers  the  best 
present  solution  to  a  digital  actuation  system. 

In  general  it  was  found  that,  digital-to-analog  conversions  are 
most  efficiently  performed  (weight,  volume,  cost)  at  the  lowest  possible 
power  and  simplest  mechanical  levels,  thus  ruling  out  digi.sl  actuators. 
Stepper  motor  systems  do  not  have  frequency  responses  in  the  range  of 
servohydraul ic  systems  for  flight  control  applications  with  high  force 
levels.  Since  the  baseline  system  requirements  of  this  study  could  not 
be  satisfied  with  a  stepper  motor,  it  was  not  pursued. 

With  respect  to  pressure  and  position  transducers  it  also 
appears  that  flux-summing  may  be  a  more  efficient  process  than  optica -- 
mechanical  techniques.  Technology  surveys  have  shown  there  to  be 
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several  digital  circuit  techniques  available  which  are  compatible  with 
flux-summing  transducers. 

Digital  Sampling  Rate  -  The  results  of  tt's  analysis  suggest 
that  a  minimum  frequency  criteria  can  be  established  based  on  several 
performance  factors.  These  factors  are  compensation  required  to 
alleviate  excessive  wear  of  valves  or  fatigue  of  hydraulic  lines  v'’ile 
maintaining  performance  requirements  of  the  actuator  system.  The  rate 
selected  was  inn  Hz.  If  the  data  bus  is  shared  and  the  sampling  rate  of 
other  systems  is  to  be  considered,  it  would  appear  that  the  rule-of- 
thumb  minimum  sample  rate  should  apply.  This  is  at  least  five  times  the 
actuator  band  pass  (9  Hz)  or  45  Hz. 

As  suggested  in  Configuration  V,  the  use  of  a  microprocessor  in 
the  servo  processor,  or  switching  circuit  techniques  (PWM)  for  driving 
the  servovalve  with  similar  techniques  for  the  LVDT's,  can  provide 
digital  summing  »  a  technique  which  may  eliminate  the  need  for  a  notch 
fi  1  ter. 

Servo  Processor  Configuration  -  Over  the  range  of  configura¬ 
tions,  it  was  found  that  the  anal og  circuits,  which  interface  with  the 
analog  actuation  elements,  remained  fairly  constant,  and  changes  in  the 
servo  procesor  were  due  to  the  requirement  to  condition  incoming  signals 
by  adding  front-end  circuits  such  as  (1)  serial  data  bus  interface  cir¬ 
cuits  '2)  di gital -to-anal eg  circuits,  and  (3)  notch  filters. 

These  analog  circuits  are  fairly  standard  for  existing  servo 
valves,  feedback  transducers  and  for  given  redundancy  schemes,  although 
many  performance,  maintainability,  and  cost-saving  tradeoffs  are 
possible  when  the  design  of  the  servo  processor  is  in  the  same  house  as 
that  of  the  actuator  itself. 


However,,  when  the  servo  processor  and  actuator  are  Integrated 
as  In  Configurations  III  and  IV,  some  distinct  changes  are  possible 
leading  to  a  higher  use  of  digital  techniques,  and  requiring  the 
introduction  of  semiconductor  technology  capable  of  high  operating 
temperatures. 

The  first  of  these  Is  in  Configuration  III  where  digital 
switching  techniques  would  be  substituted  for  the  analog  circuits,  still 
permitting  the  use  of  standard  analog  servo  valves,  feedback  trans¬ 
ducers  ,  and  actuators  without  any  penalty  to  system  performance.  (Note 
that  in  the  configuration  studies.  Configuration  III  employed  analog 
circuits,  since  digital  switching  circuits  developed  on  HR  Textron 
internal  RXO  funds  are  in  the  process  of  patent  application.) 

An  architecture,  not  considered  in  the  configuration  studies, 
is  the  use  of  the  microprocessor,  as  in  IV,  but  with  the  analog  actua¬ 
tion  elements  of  III.  This  configuration  is  a  major  change  in  the 
redundancy  management  scheme  and  has  possible  major  system  advantages 
for  force-sharing  redundancy  management  schemes. 


108 


CONCLUSIONS 


•  In  a  digital  flight  control  system,  digital -to-analog  con¬ 
version,  required  in  the  actuation  subsystem,  can  be  most 
effectively  and  efficiently  made  when  it  is  accomplished  in 
the  servo  processor. 

«  High  temperature  semiconductor  technology  permits  locating 
the  servo  processor  circuits  at  the  actuator  In  a  digital 
configuration,  hence  future  designs  could  have  the  elec¬ 
tronics  integrated  with  the  actuator.  The  only  limitations 
to  the  design  of  an  integral  electronics  actuator  is  the 
capability  of  the  electronics  to  withstand  the  environment. 

•  Semiconductor  technology,  capable  of  providng  system  reli- 
ability  of  10  failures/hour  at  junction  temperatures  of 
2000c,  has  been  developed  on  a  government  sponsored  program. 

•  The  use  of  digital  switching  techniques  in  the  servo  proces¬ 
sor  permits  the  use  of  standard  linear  (analog)  servo  valves 
and  feedback  transducers  without  any  penalty  to  system  per¬ 
formance.  This  is  of  particular  value  since  RXD  programs 
for  digital  servovalves,  actuators,  and  transducers  have  not 
been  successful ,  nor  have  they  produced  any  useful  hardware 
for  this  type  of  application. 

•  The  advantages  to  be  derived  from  an  integral  electronics 
actuator  are  summarized  in  Table  3,  page  110.  With  a  micro¬ 
processor  incorporated ,  the  resulting  "smart  actuator" 
includes  a  potential  for  new  redundancy  management  concepts. 

•  Sufficient  technology  has  been  derived  and  generated  on  this 
program  to  allow  the  design  and  fabrication  of  digital 
actuation  equipment  that  could  demonstrate  the  validity  of 
the  analytical  results  of  this  program. 
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TABLE  3.  ADVANTAGES  DF  A  “SMART",  ACTUATION  SYSTEM 


•  SYSTEM  PERFORMANCE 

•  IMPROVED  PERFORMANCE 

•  COORDINATED  ENGINE  ANO  FLIGHT  CONTROL 

•  FLEXIBILITY  AND  MULTIMODE  CONTROL  AND  RECONFIGURATION  ON  FAILURE 

•  IMPROVED  CHECKOUT  AND  SELF-MONITORING  FOR  FAILURE  ASSESSMENT  ANO  CORRECTION 

•  COMPENSATION  FOR  DEGRADATION 

•  EQUIPMENT 

•  MULTITECHNOLOGY  APPROACH  TO  PRODUCT  IMPROVEMENT 

•  RELIABILITY  ADVANTAGES  OF  OIGITAL  CIRCUITS 

•  LOW  POWER  CIRCUITRY 

•  ARRAY  DEVELOPMENT  POTENTIAL 

•  INTEGRATED  ELECTRONIC  FAILURE  DETECTION  CIRCUITS 
r,  ORDcH-OF  MAGNITuOE  REDUCTION  IN  WIRING 

•  MANAGEABLE  EMI.  EMP  CONFIGURATION 

•  PROCUREMENT 

•  SIMPLIFIED  INPUT-OUTPUT  SPECIFICATION 

•  REDUCTION  IN  INTERFACE  PROBLEMS 

•  SIMPLIFIED  ASSIGNMENT  OF  VENOOR  RESPONSIBILITIES 

•  MAINTENANCE.  LOGISTIC  SUPPORT  OF  ACTUATION  SUBSYSTEM 

•  AUTORIGGING  OF  SYSTEM 

•  SELF  CALIBRATION.  SELF  ADJUSTMENT  OF  NULLSHIFTS 

•  ADJUSTMENT  FOR  OUT-OF-TOLERANCE  CONDITIONS 

•  DEPOT-LEVEL  DIAGNOSTICS  AT  FLIGHT  LINE 

•  REDUCTION  IN  TEST  EQUIPMENT 


•  No  insurmountable  problem  exists  In  tne  area  of  digital 
actuation  that  cannot  be  solved  If  sound  engineering 
practices  are  used. 
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SECTION  VII 

RECOMMENDATIONS  FOR  FUTURE  DEVELOPMENT 


The  RSO  programs  recommended  to  achieve  and  optimize  a  digital 
actuation  system,  in  the  order  of  priority,  are  as  follows: 

•  a  program  to  design  an  actuator  which  would  have  the  servo 
processor  as  an  Integral  part.  Hybrid  mi  oelectronic 
packaging  techniques  and  high  temperature  electronic  semi¬ 
conductors  would  be  Included  in  this  design. 

•  a  program  to  design,  construct  and  test  a  flight  worthy 
"smart  actuator"  in  order  to  demonstrate  the  unique  concepts 
that  have  been  derived.  Included  in  this  design  would  be 
requirements  for  small  volume,  low  power,  and  a  high 
temperature  capability. 

«  a  study  program  to  develop  standards  for  serial  busses, 
including  format,  and  protocol,  optimized  for  control  loop 
appl ications.  These  would  be  applicable  to  all  types  of 
mil itary  aircraft. 

•  a  study  program  to  determine  the  improved  reliability  and 
redundancy  requirements  of  flight  control  system  architec¬ 
tures  using  "smart  actuator"  concepts. 
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APPENDIX  A 

FLIGHT  CONTROL  ACTUATION  SYS1IM  SPECIFICATIONS 


TASLE  A-l.  SYSTEM  SPECIFICATIONS 


HYORAULIC  PRESSURE 

output  force 

Output  ram  velocity 
ACTUATION  DEVICE  STROKE 
LOOP  GAIN 

FREOUENCY  RESPONSE 
HYSTERESIS 
THRESHOLD 
NULL  BIAS 

DIGITAL  SAMPLING  RATE 
backlash 

FAILURE  TRANSIENTS 
(NO  INPUT  SIGNAL  ANO 
NO  LOAD) 

SURFACE  LOAD 

OUTPUT  POSITION  TRANSDUCER 

SERVOVALVE 
BYPASS  valve 


SOLENOID  VALVE 

ACTUATION  DEVICE  WEIGHT 
SEH  VO  ELECTRON  ICS  WEIGHT 
RELIA3IUTY 

(SERVOACTUATION  systemi 
TEMPERATURE 


ALTITUDE 
EMI  SPIKES 


-  3000  pii  STATIC  -  85  pi.  RETURN 
2500  pit  DYNAMIC  -  500  p»i  RETURN 

-  13.100  lb.  COMPRESSION 
13,000  +250  lb.  TENSION 

-  6.70  inv/jec.  @  2000  PII  EXTEND  AND  RETRACT 

-  +  2.25  mch»s 

-  40  r«d/iec/@  2900  pi. 

-  NOMINALLY -3 dB  AT 9  Hi  (SEE  FIGURES  A-1  AND  A-2  FOR  LIMITS) 

-  0.1%  OF  RAM  STROKE 

-  0.05%  OF  RAM  STROKE  @  0.1  Hi 

-  0.25  mi. 

-  100  Hi 

-  0.002  m. 

-  1ST  FAILURE  -8%  OF  FULL  STPOKE 
2ND  FAILURE  -8%  OF  FULL  STROKE 
3RD  FAILURE  -16%  OF  FULL  STROKE 

-  I  -ISOSLUGfi2 

K  •  1.35  X  10°  m-lb/rsd 

-  5  VRMS®  FULL  SCALE 

n  -  15°  LEADING  PHASE  SHIFT 

-  8  mi  -lOCOohm* 

-  ®  300  pi.  -  BLOCK  VALVE  CYLINDER  PORTS  AND 

INTERCONNECT  RAM  PORTS 
<S>  400  Pi.  -  OPPOSITE  TO  ABOVE 

-  NORMALLY  OFF 
POWER  —  0.4a  @  14  VDC 

-  ORY  WEIGHT  _  13  ,t>s  MAX 

-  32  lbs  MAX 

-  PROBABILITY  OF  FAILURE  PER  10  HOUR  MISSION 
2.0  X  10‘® 

AMBIENT  AIR  TEMPERATURES 

•  -6P°F  TO  160°F  CONTINUOUS 
9  220°F  FOR  I0m.nui8s 

•  240°F  FOR  2.5 
HYDRAULIC  OIL  TEMPERATURES 

•  -40° F  TO  275°F 

SYSTEM  OPERATING  TEMPERATURE 

•  -40°F  TO  250°F 

-  TO  70,000  It  <s>  40.000  /mm 

-  DC  +  50  TO -150%  NORMAL 
AC  +  50%  NORMAL 
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AMPtllUO:  RADIO  fiB  AMPLITUDE  RATIO  d6 


PHASfc  LAC  DEGREES 


APPENDIX  B 

RASE LINE  CONFIGURATION  CHARACTERISTICS  AND  PERFORMANCE 


1.  Performance  Characteristics 

Frequency  Response 

Small  and  large  amplitude  (1  percent  and  10  percent  of  ram  full 
strokp)  frequency  response  runs  were  made  utilizing  the  dynamic  model. 
The  results  shown  in  figures  R-l  and  R-?  indicate  that  the  frequency 
response  meets  required  limits  (nominally  -3  db  at  9  Hz). 

Step  Response 

Figure  B-3  shows  the  step  response  of  the  system  for  a  5  per¬ 
cent  of  full  stroke  input  and  demonstrates  that  the  system  exhibits 
excellent  positional  stability. 

Failure  Transients 

Failure  transient  analyses  were  conducted  to  determine  the 
effects  of  a  hardover  servovalve  failure  on  the  master  and  on-line 
channels.  Since  a  hardover  servovalve  failure  is  the  most  severs 
servovalve  failure,  it  is  the  only  failure  mode  considered.  The  fail¬ 
ures  were  induced  with  no  input  command  applied  to  the  control  loop  and 
no  load  applied  to  the  control  surface.  The  failure  transients  for  the 
hardware  servovalve  failure,  shown  in  figure  8-4  indicated  that  the 
failure  transients  of  0.3,  1.2,  and  9.0  percent  respectively  did  not 
exceed  the  requirement  of  8.0  percent  of  ram  full  stroke  for  the  first 
and  second  failure  and  16.0  percent  of  ram  full  stroke  for  the  third 
f ai 1 ure. 
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AMPHTUOe  RATIO  6B 


?H/SF  LAfi  OF (tftfc  f  S 


ACTUATOR  DISPLACEMENT  -  IN 


Positional  Accuracy 


System  accuracy  is  determined  by  analyzing  the  effects  of  the 
control  loop  component  tolerances  on  the  actuation  device  positional 
accuracy.  The  closed  loop  transfer  function  is  written  for  the  control 
loop  and  the  component  tolerances  are  treated  as  biases  superimposed  on 
the  transfer  function  (denoted  by  an  "X"  in  the  figure  B-5  equation). 

In  considering  the  design  issues  for  physical  partitioning,  only  the 
servoelectronics  change  location  and  environment.  For  example,  the 
servovalve  is  not  included  because  it  is  the  same  for  the  baseline  and 
configurations  I  through  IV.  The  electronics  were  analyzed  at  an 
ambient,  temperature  of  75  Deg.  F. 


As  stated  above,  the  actuation  device  positional  accuracy  is 
found  from  the  steady  state  position  equation  defined  in  figure  B-5. 
This  equation  is  incorporated  into  a  computer  program  which  uses  a 
random  number  generator  routine  to  account  for  tolerance  effects  and  a 
cutine  for  performing  a  $tati$i.i(-dl  summary  on  the  sampled 


population  of  innn.  Individual  errors  and  tolerances  are  assumed  to  be 
normally  distributed.  The  results  show  that  the  maximum  error  is  j_0.32% 


Vc 


G  •  x.. 


-*•  xc 


Figure  8-5.  Baseline  System  Steady  State  Position  Equation 
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of  full  stroke  and  are  summarized  In  terms  of  99.7  percentile  positional 
error,  meaning  that  99.7  percent  o+'  all  samples  will  have  a  smaller 
value. 


Nonlinearities,  Dead  Zone,  Hysteresis,  and 

Resolution 

The  nonlinearities,  dead  zone,  hysteresis,  and  resolution  of 
the  baseline  system  were  obtained  by  applying  a  0.1  Hz  sinusoidal  input 
to  the  model  and  increasing  its  amplitude  until  main  ram  motion  was 
observed.  The  resolution  of  the  system  is  0.035  percent  cf  ram  stroke, 
which  is  less  than  the  requirement  of  0.05  percent. 

2.  Physical  Characterisitcs 

Power 

The  power  consumption  of  the  major  system  elements  is  54.3  Va 
for  three  (3)  channels.  The  element  break-down  is  shown  in  table  8-1. 

Envi ronment 

The  system  meets  the  specified  operational  temperature 
requirements  which  are: 

System 

Hydraulic  hi! 

Ambient  Air 


Wei ght/Vol ume 

The  total  weight  of  the  servo  processor,  actuation  devices,  and 
associated  cabling  for  three  channels  is  72.76  lbs.  (See  table  B-2). 


-40  Dey  F  to  250  Deg.  F 

-40  Oeg.  F  to  275  Oeg.  F 

-65  neg.  F  to  160  oeg.  F 

continuously 

220  Deg  F  for  1C  minutes 

240  Deg.  F  for  2.5  minutes 


TABLE  B-U  BASELINE  SYSTEM  POWER  REQUIREMENTS 


SINGLE 

CHANNEL 

(V3) 

three 

CHANNELS 

(Va) 

servovalve  <svj 

0.064 

0.192 

$v  LVOT 

0.1 

0.3 

RAM  LVOT 

0.1 

0.3 

AP  LVOT  (2) 

0.1 

0.2 

SOLENOlO  (4) 

9.6 

384 

SERVO  AMP. 

0.4 

1.2 

SV  LVOT  DEMODULATOR 

0.3 

09 

RAM  LVOT  DEMODULATOR 

0.3 

0.9 

MOOEL  RAM  LVOT  DEMODULATOR 

03 

0.9 

RAM  LVOT  MONITOR  (41 

0.2 

08 

AP  LVOT  DEMODULATOR  (4) 

0.3 

1.2 

AP  LVDT  MONITOR  (2) 

0.2 

0.4 

MODEL  AP  LVDT  DEMODULATOR 

0.3 

0.9 

SOLENOlO  DRiVER  (4| 

0.6 

2.4 

SWITCH  DRIVERS  (41 

0.1 

0.4 

EX  STATION 

0.6 

1.8 

MOOEL 

0.3 

OS 

GATE  CIRCUITRY 

0.2 

0.6 

COMPARATOR 

0.3 

0.9 

LATCH 

0.2 

0.6 

TOTAL 

14.5 

54.19 

The  servoeloctronics  volume  for  these  channels  is  120  cubic  inches  and 
the  actuation  device  is  163  and  173  cubic  inches  with  the  piston 
retracted  and  extended  respectively. 

The  baseline  actuation  device  was  designed  for  this  study  and 
is  depicted  in  figure  B-6.  This  design  is  based  on  the  F-lfi  actuator 
with  modifications  to  meet  the  wei ght/vol ume  characteri sti cs  and  to 
exclude  components  not  application  to  the  study.  Three  actuators  are 
used  in  paral lei . 

Parts 

The  total  number  of  parts  for  the  three  (3)  channels  is  63, 
comprised  of  the  following: 
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TABLE  B-2.  WEIGHT  SUMMARY  IN  POUNDS  (BASELINE  SYSTEM) 


ACTUATION  DEVICE 

QTY 

WEIGHT-POUNDS 

ACTUATOR 

3  ®  1 5.23 

45.69 

ACTUATOR  LVDT 

3®  0.61 

1.82 

BYPASS  SOLENOID  VALVE 

3®  0.52 

l.fl 

SERVOVALVE  WITH  LVDT 

3®  0.90 

2.7C 

DIFF.  PRESS.  TRANSDUCER  WITH  LVDT 

2*®  0.34 

.68 

SUB-TOTAL 

52.46 

•NONE  REQUIRED  FOR  CHANNEL  A 

1 

SERVO  PROCESSOR 

| - 

GTY 

WEIGHT-POUNDS 

POWER  SUPPLY  MODULES 

3®  0.5 

1.5 

CARDS 

9®  0.3 

2.7 

INTERCONNECT  CARD 

1 

08 

CHASSIS 

1 

1.0 

CARO  GUIDES.  BRACKET.  ETC 

1 

1  0 

SUBTOTAL 

7.0 

CABLING 

SUB-TOTAL 

13.3 

TOTAL 

72.76  Ibi. 

Servo  Processor 

4  Switch  driver 

3  Servoampl i fiers 
3  Threshold  detectors 
3  Solenoid  drivers 
13  ne.Tiod'jl  ators 
1?  Logic  gates 
3  Delay  latch 
3  Excitation 

5  Monitor  circuit 
3  Model 


Actuation  Device 

3  Servovalve  with  LVnT 
3  Actuator  with  LVDT 

2  Differential  pressure 
transducers  with  LVDT 

3  Bypass  solenoid  valves 


11 


52 
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SERVOVALVE 


DIFFERENTIAL  PRESSURE  TRANSDUCER 


BY-PASS  VALVE 


X 


SECTION  A -A 


Figure  B-6.  Actuation  Device 
Oost/Avai laui 1 ity 

Rased  on  1080  dollars,  the  estimated  cost  of  the  three  (3) 
channel  system  is  t45,031.00.  The  cost  breakdown  is: 


Servoprocessor 
Cdbl i na 

Actuation  Device 


tin, Ron. on 

481.00 

34,050.00 


It  is  concluded  that,  the  system  would  be  readily  available 
since  current  state-of-the-art  components  are  used. 


i 


Bus  Type /Wi ring 


Hardwiring  is  used  to  Interconnect  the  elements  in  the  baseline 
system.  Thirty-two  (32)  wire  pairs  ana  five  (5)  triples  are  required 
for  a  total  of  79  wires  as  follows: 


Conmand  to  servoprocessor 

- 

3  pair 

Servoprocessor  to  servovalve 

- 

3  pair 

LVOT  excitation  (RAM) 

- 

3  pair 

LVDT  secondary  to  electronics  (RAM) 

- 

3  triple 

Electronics  to  solenoids 

- 

3  pair 

SV  LVDT  excitation 

- 

3  pair 

SV  LVDT  secondary 

- 

3  pai  r 

Ap  LVDT  excitation 

- 

2  pair 

Ap  LVDT  secondary 

- 

2  triple 

28  VDC 

- 

3  pair 

Computer  channel  fail 

- 

3  pair 

Ap/FB  disable 

- 

3  pair* 

Actuation  device  Tail 

- 

1  M  A  4  M 

o  po  i  1 

All  wiring  is  26  AWG  shielded  twisted  pair  with  two  (2) 
exceptions.  The  power  supply  wires  are  16  AWG  shielded  twisted  pair  and 
the  Ram  LVDT  and  the  differential  pressure  LYDT  wires  are  26  AWG 
shielded  twisted  triple  conductor. 

The  following  criteria  were  used  to  estimate  the  weight  of  the 
wiring  in  the  system: 


Wi re  Type 

lb/1000  ft 

26  AWG 

Shielded  twisted  pair 

14.11 

26  AWG 

Shielded  twisted  triple 

18.52 

16  AWG 

Shielded  twisted  triple 

41.37 

♦Channel  C  has  redundant  Ap  FB  disable  lines. 


Noise 


The  system  Is  capable  of  operation  under  the  following  types  of 
power  spikes: 

DC:  +501  to  -150$  of  normal 
AC:  +50$  of  normal 

Shielded  twisted  pair  and  triple  conductors  were  selected  to  minimize 
internally  and  externally  generated  EMI  effects. 

Reliability 

A  redundancy  management  model  for  predicting  failure  rates  was 
developed  for  the  baseline.  This  model  was  used  to  design  the  servo- 
actuation  system  to  achieve  the  required  reliability  of  2  x  10'^/hr. 

The  system  has  three  parallel  channels  with  failure  detection  in  each 
channel  and  the  ability  to  transfer  control  to  a  healthy  channel,  hence, 
the  "system  failure  rate"  {probability  of  system  loss  for  a  one  hour 
mission)  is  several  orders  of  magnitude  smaller  than  the  failure  rate 
for  each  channel . 

Three  single  point  failures  have  been  identified  as  follows: 

Ram  -  Stuck 

Bypass  Valve  Spool  -  Moves  to  bypass  position 
Command  Signal  Wires  -  Open  or  shorted 

The  design  of  these  components  ’ s  such  that  there  is  low  probability  of 

-13  -14 

these  failure  modes.  A  failure  rate  of  10  and  10  are  assigned  to 
the  first  two  items.  The  comnand  signal  wires  are  very  short  runs  be¬ 
tween  cards  and  are  located  in  the  controlled  environment  of  the  control 

-12 

processor.  A  failure  rate  of  4.4  x  10  is  assigned  to  these  two 
wi res . 
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There  are  several  components  which  have  an  "undetectable" 
failure  mode.  This  type  of  failure  in  Channel  A  is  of  great  concern 
because  it  prevents  the  two  fail  operation.  These  items  can  be  made 
redundant  but  for  this  study  they  were  not  In  order  to  demonstrate  that 
the  Redundancy  Management  Model  can  predict  the  reliability  and  the 
effects  of  the  thresholds. 

The  servoactuation  system  failure  rate  for  the  baseline  is  1.42 
x  lCf10  per  hour  which  is  less  than  the  requirement.  The  calculated 
mean  time  between  failure  (MTBF)  was  6902  hours. 
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APPENDIX  C 

SERVOACTUATOR  DYNAMIC  ANALYSIS 


An  HR  Textron  Inc.  developed  nonlinear  dynamic  simulation 
mathematical  model  was  used  to  analyze  the  performance  of  the  various 
flight  control  system  configurations,  the  model  was  used  to  evaluate 
dynamic  performance  In  the  following  areas:  system  stability,  transient 
step  response  (includes  slew  rate,  overshoot,  settling  time),  frequency 
response,  resolution,  and  lilure  transients. 

1.  DYNAMIC  SIMULATION  MODEL 

Figure  C-l  shows  a  schematic  illustration  of  the  physical 
system  used  in  the  development  of  the  nonlinear  model,  along  with  some 
of  the  significant  parameters  and  variables.  Figure  C-2  Is  a  block 
diagram  illustration  of  the  overall  nonlinear  simulation  and  table  C-l 
presents  a  description  of  the  parameter  constants  used  in  the  nonlinear 
simulation. 

A  detailed  description  of  the  nonlinear  model  is  as  follows: 

a.  Inputs 

System  transient  input  variables  are  command  voltage  and 
externally  applied  torque  on  the  surfaces. 

b.  Initial  Conditions 

The  simulation  contains  an  "initial  conditions"  routine 
that  solves  for  the  initial  steady  state  conditions  of  the 
system  by  iteration  before  the  integration  process  begins. 
The  initial  conditions  may  include  the  effect  of  an  initial 
command  voltage,  an  externally  applied  torque  on  the  sur¬ 
face  and  a  servovalve  static  null  bias. 

c.  Servovalve 

Servovalve  dynamics,  illustrated  in  figure  C-2  are 
simulated  by  relating  input  torque  motor  current  to  output 
spool  position,  using  a  second  order  linear  differential 
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GROUND 


PS 


PR 


equation.  The  nonlinear  effect  of  second  stage  saturation 
is  simulated  by  limiting  spool  displacement  and  the  first 
stage  saturation  is  simulated  by  limiting  second  stage 
spool  velocity.  The  effects  of  a  static  null  bias  on  spool 
position  and  servovalve  hysteresis  are  also  simulated. 

The  servovalve  second  stage  spool  flows  Illustrated  in 
figure  C-T  are  calculated  in  the  nonlinear  simulation  at 
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Figure  C-?.  81ock  Diagram  of  Nonlinear  Simulation 


TABLE  C-l.  DESCRIPTION  OF  PARAMETER  CONSTANTS 


SYMBOL 

UNITS 

DESCRIPTION 

A1 .  A2 

in2 

ACTUATOR  PISTON  EFFECTIVE  AREAS.  SIDES  1  ANO  2 

8A 

lbf/S8c/in 

VISCOUS  DAMPING  COEFFICIENT.  PISTON  TO  HOUSING 

BH 

IBf/«ec/m 

VISCOUS  DAMPING  COEFFICIENT,  ACTUATOR  HOUSING  TO  AIRCRAFT 

fl 

in-lbf 

STATIC  FRICTION  TORQUE,  SURFACE  TO  GROUND 

f2 

In-lbf 

RUNNING  FRICTION  TORQUE.  SURFACE  TO  GROUND 

f  A1 

ibr 

STATIC  FRICTION.  PISTON  TO  HOUSING 

(A2 

iDf 

RUNNING  FRICTION.  PISTON  TO  HOUSING 

IL 

.n-lbf-MC2 

SURFACE  MOMENT  OF  INERTIA  ABOUT  PIVOT  POINT 

KA 

ma/woit 

AMPLIFIER  CAIN 

K.Brtl 

lbf/m 

ACTUATOR  BREATHING  STIFFNESS.  SIDE  1 

KBR2 

l  bf /in 

ACTUATOR  BREATHING  STIFFNESS.  SIDE  2 

KQ 

v/v 

DEMODULATOR  GAIN 

KFB 

v/m 

lvot  GAIN 

KH 

ibf/m 

SCRIES  SPRING  COMBINATION  OF  KH  1  AND  KH2 

KH1 

Ibf/in 

ACTUATOR  HOUSING  COMPLIANCE  OUTSIDE  LVDT  ATTACH  POINT 

KH2 

lbf/m 

ACTUATOR  HOUSING  COMPLIANCE  INSIDE  LVDT  ATTACH  POINT 

KP 

v/psi 

DIFFERENTIAL  pressure  transducer  GAIN 

KPF 

v/v 

PRESSURE  FEEDBACK  COMPENSATION  GAIN 

KS 

lbf/m 

SERIES  SPRING  COMBINATION  OF  KSl.  KS2A,  AND  KS2L 

K5 1 

IU' •  ;n 

ACTUATOR  nGO  CO*«" Li ANC£  ! NS ! 0 £  uVuT  ATTACH  POINT 

KS2A 

ibf.'m 

ACTUATOR  ROO  END  COMPLIANCE  OUTSIDE  LVDf  ATTACH  POINT 

KS2L 

lbf/m 

SURFACE  COMPLIANCE  BETWEEN  SURFACE  ANC  ACTUATOR 

KSV 

in/ma 

SERVOVALVE  S°OOL  POSITION  GAIN 

mact 

ibf-sec  ;m 

ACTUATOR  PISTON  *  HOD  END  MASS 

MH 

2 

ibf-sec  .  in 

ACTUATOR  HOUSING  MASS 

PI 

ps« 

PRESSURE  IN  CYLINDER.  SIDE  1 

p? 

Pfi 

PRESSURE  IN  CYLINDER.  SIDE  2 

PR 

PSI 

RETURN  PRESSURE  AT  PUMP 

PRSV 

PSi 

SERVOVALVE  RETURN  PRESSURE 

PSSV 

PS1 

servovalve  supply  pressure 

QLK1 

:s 

SERVOVALVE  FIRST  STAGE  LEAKAGE  p  LOW 

R 

:  n 

MOMENT  ARM.  SURFACE  PIVOT  POINT  TO  ACTUATOR  CENTERLINE 

T  AERO 

in.lfcs 

AERODYNAMIC  load 

VI 

OIL  VOLUME  AT  NULL.  SIDE  1 

V2 

m3 

OIL  VOLUME  AT  NULL.  SIDE  2 

VS 

m3 

OIL  VOLUME,  PUMP  TO  SERVOVALVE,  SUPPLY  SIDE 

J 

BULK  MODULUS  OF  HYDRAULIC  OIL 

PRR 


PSS 


PRR 


+  XSV 


-  fn  [XSV,  PI.  P2,  SUPPLY  &  RETURN  PRESSURES,  FLUID 
PROPERTIES  (DENSITY  AND  VISCOSITY).  AND  VALVE 
GEOMETRY  (WINDOW  WIDTHS  &  LENGTHS,  SPOOL- 
SLEEVE  CLEARANCE,  SPOOL  DIAMETER,  OVERLAP 
AND/OR  UNDERLAP  LENGTHS)] . 


Figure  C-3.  Servovalve  Spool  Valve  Flows 


each  increment  in  time  as  a  function  of  spool  displacement, 
the  cylinder  pressures,  the  supply  and  return  geometry 
(i„e.,  window  widths,  window  lengths,  spool/sleeve 
clearances,  spool  diameter,  overlap  and/or  ur.derlap 
lengths).  The  method  utilizes  sharp-edged  orifice 
equations  and  equations  for  flow  between  concentric 
cylinders,  with  entrance  region  effects  taken  into  account. 
Reynolds  number  effects  (i.e.,  laminar,  transiti onal ,  and 
turbulent  flow  cons iderati oris )  are  accounted  for. 

d.  Parasitic  Pressure  Losses 

Parasitic  pressure  drops  within  the  actuator  passageways 
are  simulated,  as  illustrated  in  figure  C-4.  The  pressure 
drop  coefficients  were  computed  from  a  pressure  drop 
analysis  of  the  actual  system,  for  various  fluid 
temperatures. 

e.  Actuator 

Compliances  are  distributed  according  to  whether  they  occur 
inside  or  outside  the  LVOT  attach  points.  The  inertias  of 
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XF1,  XF2.  XH.  AND  XA  ARE  ABSOLUTE  DISPLACEMENTS 
WITH  RESPECT  TO  GROUND 

XF0-XF2-XF1  -  RELATIVE  DISPLACEMENT 
OF  XF2  WITH  RESPECT  XF1 

«  LVDT  FEEDBACK  DISPLACEMENT  SIGNAL 

XAH-XA-XH  »  RELATIVE  DISP  ACEMENT  OF  PISTON 
WITH  RESPECT  .0  HOUSING. 

REGIME  I.  XAH  *  0  (i«,  PISTON  IS  IN  MOTION  RELATIVE  TO  HOUSING' 
A  FORCE  BALANCE  ON  THE  ACTUATOR  HOUSING  GIVES 


(1) 


12) 


MH  1  ♦  BH  S1!**1  +  KH*XH  *  -  £(P1«A1  -  P2*A2)  ♦  BA 

dt2  dt  ’  "  1 


dIXAH) 


dt 


♦  A, 


13) 


A  FORCE  BALANCE  ON  THE  ACTUATOR  PISTON  AND  ROD  END  GiVES 


MACT- 


d2(XA)  ^ 


dt 


.1  /  \  d(XAH) 

Z,  l  PI  A1-P2  A2  -  FKS  -  BA - =F  fA 

.  1  '  •  dl 


i  -  1 


(41 


ELIMINATING  THE  VARIABLE  XA  FROM  EQUATION  4  USING  EQUATION  2, 
THEN  SUBSTITUTING  IN  FOR  THE  SECOND  DERIVATIVE  OF  X  USING 
EQUATION  3  RESULTS  IN 


MACT  d2,*AMI  *  BA  d,XAH) 

U  ♦  MACT\  . 

JfORCEa  S  fA2J 

L  „  MAcr\ 

dt2  dt 

v  mhJ 

^  MH  ' 

WHERE: 


forcea- 


3/  \  —FKS  *  (kH-XH  *  BH 

*  Z  P1*A1  -P2*A2|  ♦  MH  \ _ dt  / 


,  ^  MACT 
MH 


15) 


(6) 


NOTE:  THE  SUMMATION  FROM  i  •  1  TO  3  REFERS  TO  THE  THREE 
FORCE-SHARING  ACTUATORS 


Figure  C-4. 


Force  Balance  Equations  for  Actuator 


13? 
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Fluid  compressibil Ity  is  accounted  for.  Thus,  the 
continuity  equations  result  in  a  first  order  differential 
equation  for  each  cylinder  pressure  (PI  and  P2). 

f,  Structural  3acklash 

Structural  backlash  or  linkage  free  play  between  the 
actuator  and  the  load  is  simulated.  Figure  C-6  shows  the 
equations  relating  the  force  transmitted  between  the 
actuator  and  the  load  (FKS)  and  linkage  free  play. 


6  -  TOTAL  BACKLASH  IN  LINKAGE 


KS  -  TOTAL  SPRING  RATE  -  -- - - - — 

KS1  +  KS2A  +  KS2L 


LET  "FKS"  BE  THE  FORCE  TRANSMITTED  BETWEEN  THE  ACTUATOR 
AND  THe  LOAD. 


Figure  C-fi.  Force  Transmitted  Between  Actuator  and  Load 
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If  the  velocity  d(XAH)/dt  passes  through  or  reaches  zero  at  anv 
time  throughout  the  Integration  process,  then  "Regime  II"  Is  entered, 
described  as  follows: 


Re£lme_IIj_  XAH  =  0  (l.e.,  piston  1$  in  striction  to  housing) 

A  force  balance  on  the  actuator  housing  and  piston  combined 

gives: 


d2( XAH) 


(MH  +  MACT)-"£H1  +  bh 

dr 

d  ( XAH 


+  KH  x  XK  -  FKS 


=  0. 


eft 


If  the  quantity  "FORCE/  defined  on  the  previous  page  exceeds 
magnitude  of  the  known  breakaway  friction  force,  then  relative  motion 
between  the  piston  and  housing  will  result,  and  "Regime  II"  described 
previously  will  be  entered. 


Addi_ti£naj_ jelationships  (independent  of  which  of  the  above  ?. 
regimes  the  system  is  functioning  within) 


yf|  -  (  KH2  ) 

KHT+Kh?  •  XH 

XF2  -  XA-g* 

XFB  =  XF2  -  XF1 
XAH  «  XA  -  XH 
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APPENDIX  D 

EFFECT  OF  40  Hz  AND  10  Hz  SAMPLE  RATES 


As  discussed  in  Section  III,  Configuration  I  was  evaluated  for 
a  sample  rate  of  100  Hz.  The  same  system  was  also  subjected  to  analysis 
with  sample  rates  of  40  Hz  and  10  Hz. 

The  results  of  the  40  Hz  analysis  are  shown  in  figures  D-l 
through  D-4.  As  can  be  seen,  the  uncompensated  servovalve  dither  is 
quite  pronounced  and  if  operated  under  this  condition  the  servovalve 
would  be  subjected  to  undue  wear.  When  a  40  Hz  notch  filter  is 
inserted,  the  wear  situation  is  essentially  alleviated. 

However,  the  notch  filter  introduces  a  significant  amount  of 
phase  lag  at  the  control  frequencies  and  the  frequency  response  plots  ot 
figures  D-5  and  D-6  indicate  that  the  system  response  is  below  the 
speci fied  limits. 

At  10  Hz  the  situation  becom  ;  further  aggravated  as  shown  in 
figures  0-7  through  0-10.  The  frequency  response  becomes  meaningless  at 
frequencies  higher  than  a  theoretical  value  of  5  Hz.  Practically,  no 
meaningful  data  can  be  obtained  beyond  a  frequency  of  3  Hz  and  the 
response  up  to  this  value  is  shown  in  figures  D-5  and  D-6. 

It  is  quite  clear  that  the  system  response  is  definitely 
outside  the  allowable  limits. 

As  indicated  above  the  filtering  was  accomplished  with  a  simple 
notch  filter.  Other  filter  conf 1 gurati ons  are  available  and  the  effect 
of  one  such  filter  is  discussed  below. 

As  indicated  above,  the  performance  of  Configuration  I  at 
sample  rates  of  40  Hz  and  10  Hz  is  unacceptable  due  to  the  fact  that  the 
filter  required  to  suppress  the  servovalve  dither  degrades  the  systems 
frequency  response. 
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RAM  O’SPl  ACEMENT  rMCHES 


AMPLITUDE  RATIO  d6 


PHASE  LAG  -  OEGftcfcS 


SERVOVALVE  SPOOL  POSITION  -  INCHES 


The  filter  used  In  each  of  these  cases  was  a  notch  filter  with 
the  notch  set  at  the  sample  frequency.  It  was  decided  to  evaluate 
different  types  of  filters  and  the  one  which  was  most  promising  was  a 
compensated  notch  filter  as  shown  in  figure  0-11.  It  consists  of  a 
notch  network  and  additional  lead  and  lag  networks.  This  filter  was 
incorporated  into  the  system  simulation  and  evaluated  for  40  Hz  and  10 
Hz  sample  frequencies. 

Tne  result?  for  the  40  Hz  sample  rate  are  shown  in  figure  H-12 
and  0-13.  As  can  be  seen  from  figure  D-6,  the  compensated  notch  filter 
improves  the  frequency  response  results,  but  the  phase  lag  exceeds  the 
phase  limit  at  frequencies  above  11.0  Hz. 

The  results  for  the  10  Hz  sample  rate  are  shown  in  figures  0-14 
and  0-15.  As  can  be  seen  from  the  figures,  the  compensated  notch  filter 
is  more  effective  in  reducing  the  servovalve  dither  but  it  introduces  an 
objectionable  peak  in  the  frequency  response  gain.  The  phase  lag 
exceeds  the  phase  limit  at  frequencies  above  2.0  Hz.  (See  figure  0-S.) 
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Figure  0-11.  Compensated  Notch  Filter 
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SCftVOVAlVE  SPOOL  POSITION  -  INCHES 
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Figure  D-12.  Effects  of  40  Hz  Sample  Rate  on  Ramp  Input  With 

Compensated  Notch  Filter 
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Figure  D-14. 


Effects  of  10  Hz  Sample  Rate  on  Ramp  Input  With 
Compensated  Notch  Filter 


Figure  n-15.  Differential  Pressure  on  Master  Channel 
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